Privacy policy
This is a translation of the Swedish original. In case of any discrepancy, the Swedish version prevails.
Website: aigiplan.com. Last updated: 2026-10-02. Data controller: Áigi Labs AB (reg. no. 559594-9941). Contact: [email protected]. Location: Umeå, Sweden.
1. Who we are
This privacy policy (the “Policy”) applies to the website aigiplan.com (the “Website”). The data controller is Áigi Labs AB (reg. no. 559594-9941), Umeå, Sweden. For questions about the processing of your personal data, or to exercise your rights under the GDPR, contact us at [email protected].
2. What data we collect
We collect personal data in the following contexts:
Via the forms on the Website — when you sign up for the newsletter or the waitlist, we collect your email address. When you contact us through the contact form, we collect your name, your email address and your message. Please do not include sensitive personal data (such as diagnoses or personal identity numbers) in forms.
Via cookies and analytics tools — when you visit the Website, certain technical data may be collected automatically, depending on your consent. See section 6 for details.
We have no user accounts on the Website and do not collect login details.
3. Purposes of processing
We process your personal data in order to:
- send invitations to beta testing and give early access to Áigi Labs products,
- send news and updates about the project to you if you have consented to this,
- understand visitor behaviour and improve the Website via analytics tools (see section 6),
- answer questions you send through the contact form,
- understand users’ needs and improve our products.
4. Legal basis
Contact details (name, email) and messages sent through the contact form are processed on the basis of consent (GDPR art. 6.1 a). You can withdraw your consent at any time:
- via the unsubscribe link in emails,
- by changing your cookie settings via the cookie banner,
- by contacting us at [email protected].
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Services that process data on our behalf
We use the following third-party services, which act as data processors and process data only in accordance with our instructions and applicable data protection law.
Resend
Used for the newsletter’s email list and for sending email, including the confirmation when you sign up and messages from the contact form to us. Your email address is stored with Resend for as long as you are subscribed. The newsletter uses double opt-in: you are added to the list only after you click the link in the confirmation email. We keep messages from the contact form only in our inbox for [email protected]; Resend keeps sent emails in its logs for a limited time. See Resend’s privacy policy for more information.
Cookiebot (Cybot A/S)
We use Cookiebot to manage, obtain and document your cookie consent in accordance with the GDPR and the ePrivacy Directive. Cybot A/S is a Danish company and processing takes place within the EU/EEA. See Cookiebot’s privacy policy for more information.
Google Analytics (via Google Tag Manager)
Activated only with your consent.
We use Google Analytics to understand how visitors use the Website (number of visits, page views, traffic sources). Google Analytics sets cookies and processes data on Google’s servers, including in the USA. Transfers to the USA are based on the European Commission’s standard contractual clauses (SCC). You manage your consent via the cookie banner. See Google’s privacy policy for more information.
Microsoft Clarity
We use Microsoft Clarity for behavioural analysis — the tool records, among other things, mouse movements, clicks and scrolling, and can replay anonymised sessions to help us understand how the Website is used and improve the user experience. Clarity is configured to minimise the collection of personal data, for example by masking input fields. Clarity processes data on Microsoft’s servers, including in the USA. Transfers are based on standard contractual clauses (SCC). You manage your consent via the cookie banner. See Microsoft’s privacy policy for more information.
We do not share your personal data with other third parties without your explicit consent.
6. Cookies and analytics
We use Cookiebot as our consent platform. The first time you visit the Website a cookie banner is shown where you choose which cookies you accept.
Necessary: Cookiebot’s consent cookie (stores your choices), no consent required. Statistics: Google Analytics, Microsoft Clarity, consent required. Marketing: not currently used.
A complete and automatically updated list of all cookies used on the Website is available on our cookie declaration page, generated by Cookiebot.
Should we add further external tools, we will update this Policy and the cookie banner before they are activated.
7. Transfers to third countries
Google Analytics and Microsoft Clarity process data on servers in the USA. Resend sends email from the EU (Ireland) but stores logs and email metadata, such as the recipient’s address, in the USA. These transfers are based on the European Commission’s standard contractual clauses (SCC) in accordance with GDPR art. 46.2 c. Cookiebot processes data within the EU/EEA.
8. Retention
- Email (newsletter and waitlist): stored until you unsubscribe or request deletion.
- Name, email and message (contact form): kept in our inbox for as long as needed to answer your question, and deleted when you ask.
- Cookie consent: stored for 12 months (Cookiebot’s default), after which new consent is requested.
- Analytics data (Google Analytics, Microsoft Clarity): processed according to each provider’s default settings. Google Analytics’ default is 14 months. You can request deletion via [email protected].
- Non-identifying feedback: may be stored longer for product development.
9. Your rights (GDPR)
You have the right to:
- request access to the data we process about you (art. 15 GDPR),
- request rectification of inaccurate data (art. 16 GDPR),
- request erasure of your data (“the right to be forgotten”) (art. 17 GDPR),
- request restriction of processing (art. 18 GDPR),
- request data portability (art. 20 GDPR),
- object to processing based on legitimate interest (art. 21 GDPR),
- withdraw consent at any time without affecting the lawfulness of prior processing.
Contact us at [email protected] to exercise your rights. We respond to requests within one (1) month in accordance with GDPR art. 12.
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe the processing violates the GDPR: imy.se.
10. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. Access to personal data is limited to authorised persons.
11. Changes to this policy
We may update this Policy to reflect changes in the business, the service or applicable law. Material changes are communicated via email to subscribers or via a clear notice on the Website. The “Last updated” date at the top of the document states when the Policy was last changed.
12. Related documents
- Terms of use — aigiplan.com
- Cookie declaration
13. Contact
Data controller: Áigi Labs AB (reg. no. 559594-9941). Email: [email protected]. Website: aigiplan.com. Location: Umeå, Sweden. Supervisory authority: the Swedish Authority for Privacy Protection (IMY), imy.se.