▸ PRIVACY POLICY

Your data, and what we do with it.

What aidalabs.io collects when you read it or get in touch, on what legal basis, who else sees it, and what you can ask us to do about it.

Version1.0
Last updated25 August 2026
ControllerNewox Group AB · 559318-6280
StatusIn force

01 Who we are

Aida is built by Newox Group AB, org. no. 559318-6280, Sjömärkesvägen 30, 423 39 Torslanda, Sweden. We are the controller for the personal data described here.

For anything about your data, write to privacy@aidalabs.io.

02 What this policy covers

This policy is about this website — what happens when you read aidalabs.io or get in touch with us.

It is not about the data a customer puts into the Aida product. That is governed by the Master Services Agreement and the Data Processing Agreement, where we act as processor on the customer's instructions rather than as controller.

03 What we collect

3.1Simply by visiting

This site is served through Cloudflare. Delivering a page requires processing your IP address and basic request details — the page you asked for, your browser and operating system, roughly where the request came from. Cloudflare also uses this to block abusive traffic.

This happens for every visitor and cannot be switched off, because there is no way to send you a page without it. We do not use it to build a profile of you.

The fonts and images on this site are served from our own domain, so reading a page does not send your IP address to any third party.

3.2Only if you agree

Analytics and marketing cookies load only after you accept them. What they are, who provides them and how long they last is set out in the Cookie Policy.

3.3If you contact us

Emailing hello@aidalabs.io means we hold your address and whatever you write. Booking a demo takes you to HubSpot Meetings, where the name, email and times you enter go to HubSpot and then to us.

If you have accepted marketing cookies, HubSpot may connect a form submission to the pages you read before it.

04 Why, and on what basis

  • Delivering and securing the site — legitimate interest, Art. 6(1)(f). Serving a page and keeping it available is what you came for.
  • Analytics and marketing — consent, Art. 6(1)(a). Withdrawn as easily as given, through Cookie settings in the footer.
  • Answering you — legitimate interest, Art. 6(1)(f), or steps toward a contract, Art. 6(1)(b), if you are asking about buying Aida.

05 Who we share with

We do not sell personal data. We use these providers, each under a data processing agreement:

  • Cloudflare, Inc. — hosting and delivery of this site.
  • Google LLC — Google Analytics. Only with consent.
  • HubSpot, Inc. — CRM, demo scheduling and visitor tracking. The tracking part only with consent; booking a demo is something you choose to do.
  • Apollo.io — estimates which organisation a visit comes from. Only with consent, and with contact-level identification switched off.

We may also disclose data where the law requires it.

06 Transfers outside the EEA

Several of the providers above are established in the United States. A transfer there needs a safeguard under Chapter V of the GDPR — in practice either the EU–U.S. Data Privacy Framework, which a provider certifies to, or the European Commission's Standard Contractual Clauses, which form part of the data processing agreement we hold with them.

We keep the arrangement with each provider under review, because the legal footing for transfers to the United States has changed more than once. If you want to know which mechanism applies to a particular provider, write to us and we will tell you.

07 How long we keep it

  • Delivery and security logs — retained by Cloudflare for a short period under their own retention terms.
  • Analytics and marketing data — for the periods listed in the Cookie Policy, and no longer than needed.
  • Correspondence — kept while the conversation is live and for as long as we may need it afterwards, then deleted.

08 Your rights

Under the GDPR you may ask us to give you a copy of your data, correct it, erase it, restrict what we do with it, or hand it over in a portable form. You may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time, which does not affect what was done before.

Write to privacy@aidalabs.io. We answer within one month, and will tell you if we need longer.

09 Complaints

If you think we have handled your data wrongly, tell us first — it is usually the fastest way to fix it. You also have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, at imy.se.

10 Changes

We update this policy when what we do changes. The date at the top is the last revision.

Newox Group AB, org. no. 559318-6280, Sjömärkesvägen 30, 423 39 Torslanda, Sweden.