Skip to content
PayMigPayMig
Legal

Privacy Policy

Last updated: 2026-07-08

This Privacy Policy explains how PayMig AB ("PayMig", "we", "us") processes personal data when you use our website paymig.tech and the PayMig app. We respect your privacy and process your data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish data protection law.

1. Data controller

PayMig AB
c/o BBI, Biblioteksgatan 4, 374 35 Karlshamn, Sweden
Email: info@paymig.tech
Phone: +46 73 6965 911

2. Data we collect

  • Contact & form data: name, email, phone number, organisation and message when you contact us or subscribe to our newsletter.
  • Payment-related data (in the app): transaction data, amounts, category and reference processed to deliver the service, including Swish integration and BankID identification.
  • Technical data: IP address, browser type and usage data via necessary cookies and aggregated statistics.

3. Purposes and legal basis

  • To respond to enquiries and provide support — legal basis: legitimate interest and/or performance of a contract.
  • To send newsletters — legal basis: consent, which you can withdraw at any time.
  • To deliver and secure the payment service — legal basis: performance of a contract and legal obligation.

4. Recipients and processors

We share data with trusted providers who process data on our behalf, including: Supabase (database and storage, EU region), our email provider for outgoing email (SMTP), and Swish and BankID for payment and identification respectively. All processors are bound by data processing agreements.

5. International transfers

We aim to store data within the EU/EEA. Any transfer outside the EU/EEA is made with appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

We keep personal data only as long as necessary for the purpose. Contact enquiries are normally kept for up to 24 months. Newsletter data is kept until you unsubscribe. Payment data is retained under applicable accounting and anti-money-laundering law (typically up to 7 years).

7. Your rights

You have the right to access, rectification, erasure, restriction and data portability, as well as the right to object and to withdraw consent. Contact us at info@paymig.tech. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

8. Security

We apply appropriate technical and organisational measures, including encryption, access control and BankID verification, to protect your data.

9. Changes

We may update this policy. Material changes will be announced on the website.