What happens to your data
I collect as little as I can, and only what I need to answer you, do the work and keep the books.
I don't sell your data, I don't use tracking or analytics, and the AI service I use is not allowed to train on what you send.
You can ask to see, correct or delete your data at any time by emailing [email protected].
Who is responsible
brainsandbuckets is run by Tim, through The Nomads Academy, a Swedish sole trader. The Nomads Academy is the controller of your personal data under the GDPR.
The Nomads Academy (brainsandbuckets)Ånn Bjornstigen 9
837 73 Duved, Sweden
[email protected]
What I collect, and why
The quick sort
When you use the quick sort, I receive your name, your email address, your company's name and what it does, its size if you give it, and your answers to the eight questions.
I use them to make your quick sort, to email a copy to you, to send me a copy so I have read it before we talk, and to contact you about it. The legal basis is your consent, which you give by ticking the box before you send. You can withdraw it at any time by emailing me, and I will delete what you sent.
The sort itself is made automatically by an AI model (Claude, from Anthropic). It sorts your work processes into four buckets. It decides nothing about you.
While you type, the page keeps your answers in your own browser, so you don't lose them if you leave the page. That copy never leaves your device unless you press send. You can remove it by clearing the site's data in your browser.
Email and the intro call
When you email me or book an intro call, I receive your name, your email address and whatever you write. I use it to answer you and to prepare the call. The legal basis is my legitimate interest in replying to people who contact me, and taking steps you ask for before we agree on any work.
Clients
If we work together, I keep contact details, the agreement, invoices and payment records, and the material from the work itself: scan notes, recordings you allowed, transcripts and reports. The legal basis is our agreement, and for invoices and payment records, Swedish bookkeeping law.
Work inside your own systems is covered by the agreement we sign, not by this page.
Visiting the site
The site sets no cookies of its own, uses no analytics or tracking, and loads nothing from other companies' servers. Like any website, it can't be delivered without your IP address. Cloudflare, which delivers and protects the site, processes your IP address and technical request data to keep it running and to stop attacks. It can set a strictly necessary cookie to tell people from bots.
The legal basis is my legitimate interest in running a secure, working website.
Who else handles it
I use a few services to do this:
| Service | What it does | Where |
|---|---|---|
| Anthropic (Claude) | Makes the quick sort from your answers. Its terms do not allow it to train models on what I send. | USA |
| Cloudflare | Delivers the site and stores quick-sort submissions. | Global network, USA-based company |
| Resend | Sends your quick sort by email, to you and to me. | USA |
| Google (Gmail) | Receives and stores the emails we exchange, including the quick-sort copy sent to me. | USA |
Anthropic, Cloudflare and Resend process data only on my behalf, under a data processing agreement. All four companies are in the United States. Transfers outside the EU and EEA are protected by the European Commission's standard contractual clauses or by the EU-US Data Privacy Framework.
I never sell your data, and I don't share it with anyone else unless the law requires me to.
How long I keep it
- Quick sort: up to twelve months, then it is deleted automatically. Sooner if you ask.
- Emails with people who did not become clients: up to twelve months after our last contact.
- Client material: as long as we work together, and up to two years after, so I can answer questions about the work.
- Invoices and payment records: seven years, because Swedish bookkeeping law requires it.
Your rights
Under the GDPR you can ask me to:
- show you what I hold about you, and give you a copy
- correct it if it's wrong
- delete it, unless the law requires me to keep it
- stop or limit using it, or object to how I use it
- give it to you in a form you can take elsewhere
Where I rely on your consent, you can withdraw it at any time. That doesn't undo what was done before.
Email [email protected] and I'll answer within a month.
Complaints
If you think I handle your data wrongly, tell me first and I'll try to put it right. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se), or to the data protection authority where you live.
Changes
If I change how I handle your data, I update this page and the date at the top.