01
Scope
This Privacy Policy applies to people who visit LIA4ALL, create an account, use a student, company, school or admin workspace, contact us, or receive service emails from us.
LIA4ALL is an internship coordination service. We do not provide school grading, admission decisions, formal education assessment or educational-level certification. The personal data we process is used to operate the platform and the workflows users choose to use.
02
Controller and contact
LIA4ALL is the controller for personal data processed for operating, securing, improving and supporting the platform.
Privacy requests can be sent to support@lia4all.se. We may need to verify your identity before acting on a request.
Schools and companies may also be independent controllers for personal data they add, review or manage through their own recruitment, internship or coordination workflows.
03
Personal data we handle
- Account data: name, email address, role, authentication identifiers, account status and security metadata.
- Profile data: information users add to student, company or school profiles, including skills, experience, education history entered by the user, portfolio links, descriptions and uploaded files.
- Workflow data: internships, applications, saved items, invitations, affiliations, placement status, notes and related timestamps.
- Billing data: Stripe customer, subscription, checkout, invoice, payment status and billing email references. Full card details are handled by Stripe, not by LIA4ALL.
- Communication data: contact form messages, school plan requests, support requests, transactional emails and delivery status.
- Technical data: IP address, device and browser information, request logs, security events and cookie or local-storage preferences.
04
Why we process personal data
- To create and manage accounts and role-based access.
- To display profiles, internships, applications, invitations and workspace records.
- To process school invoice billing and managed student access.
- To send account, security, invitation, billing and service emails.
- To respond to support, school access and privacy requests.
- To secure the platform, prevent misuse, troubleshoot errors and maintain a reliable service.
- To comply with legal obligations, including accounting, tax, fraud-prevention and data-protection requirements.
05
GDPR legal bases
- Contract: when processing is needed to provide the account, workspace, subscription, billing or requested service.
- Legitimate interests: when operating, securing, supporting and improving the platform, provided those interests are not overridden by user rights.
- Legal obligation: when records must be kept for accounting, tax, compliance, dispute or security reasons.
- Consent: when optional cookies or optional communications require consent. Consent can be withdrawn at any time.
06
Service providers
We use service providers to operate the platform. These providers may process personal data only for the services they provide to LIA4ALL, subject to their own data-processing terms and safeguards.
- Clerk for authentication and account security.
- Stripe for school invoice billing, checkout, customer records and payment status.
- Resend for transactional email delivery.
- Vercel for hosting, deployment infrastructure and application delivery; our servers run in the EU (Frankfurt, Germany).
- Vercel Blob for file uploads and storage.
- Neon for database hosting, in the EU (Frankfurt, Germany).
- Cookiebot (Usercentrics) for cookie consent; consent records are stored in the EU.
- Google Analytics for consent-based website usage statistics.
07
International transfers
Our servers and database run in the EU (Frankfurt, Germany), and Cookiebot keeps consent records in the EU. Clerk, Stripe, Resend and Google are based in the United States and may process personal data there, for example when you sign in, pay, receive an email or consent to website analytics. Vercel, our hosting provider, is also a US company.
These transfers are protected through applicable safeguards, including the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses where relevant.
08
Retention
We keep personal data only for as long as needed for the purposes described in this policy, for active user accounts and workspaces, and for legal or operational requirements.
Account and profile data is normally removed or anonymised after account deletion unless it must be kept for legal, billing, security, dispute, backup or audit reasons. Invoice and payment records may need to be kept longer because of accounting and tax obligations.
09
Your GDPR rights
Depending on the situation, you may have the right to access your personal data, correct inaccurate data, request deletion, restrict processing, object to processing, request data portability, withdraw consent and lodge a complaint with a supervisory authority.
To exercise these rights, contact support@lia4all.se. You can also contact the Swedish Authority for Privacy Protection (IMY) if you believe your personal data has been handled incorrectly.
11
Changes to this policy
We may update this Privacy Policy when the platform, providers or legal requirements change. The date at the top of the page shows the current version.
