Privacy Policy | aiteam

1. Introduction

aiteam ApS ('we', 'us', 'our') is the data controller for personal data processed through aite.am. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

2. Data We Collect

Account data (name, email, company). Organisation data (company name, industry, size). Platform usage data (assessment responses, agent registrations, metrics). AI Consultant conversation content. Technical data (IP address, browser type, access timestamps).

3. How We Use Your Data

To provide and improve the platform. To personalise your AI Consultant experience with your organisation's context. To generate anonymised benchmarks (your company is never identified). To send service communications and product updates. To calculate partner commissions (aggregated, not individual user data).

4. Legal Basis

Contract performance (providing the platform you subscribed to). Legitimate interest (improving the service, security). Consent (marketing communications, optional analytics). Legal obligation (tax records, audit logs).

5. Data Retention

Account data is retained while your subscription is active and for 90 days after cancellation. Audit logs are retained for 7 years (regulatory requirement). AI Consultant conversations are retained for 12 months. Anonymised benchmark data is retained indefinitely.

6. Data Sharing

We share data with: Supabase (database hosting, EU region), Anthropic (AI processing — no PII sent to AI models), Stripe (payment processing), Resend (email delivery), Vercel (application hosting, EU region). We never sell your data. Partner admins can see aggregated customer metrics but never individual user data or AI conversations.

7. Your Rights

Under GDPR, you have the right to: access your data, rectify inaccurate data, erase your data ('right to be forgotten'), restrict processing, data portability (JSON export), object to processing, and withdraw consent. Contact steven@aite.am to exercise any right.

8. Cookies

We use essential cookies for authentication and session management. We use preference cookies for language and theme settings. We do not use advertising or tracking cookies. Cookie consent is managed on first visit.

9. International Transfers

All primary data storage is within the EU. AI processing via Anthropic may involve data transfer to the US under Standard Contractual Clauses. No PII is included in AI API calls — only anonymised scores and context.

10. Contact the DPO

Data Protection Officer: steven@aite.am. aiteam ApS, Copenhagen, Denmark. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).