Privacy Statement
Baby Elephant B.V., trading as Aitonomy, is responsible for the personal data it collects when you visit joinaitonomy.ai, get in touch, or use the Aitonomy platform. This statement sets out what we collect, why, and the rights you have. Where we process personal data on behalf of a customer through the platform, we act as a processor, and that processing is governed by our Data Processing Agreement rather than this statement.
Who we are
The controller of your personal data is Baby Elephant B.V., trading as Aitonomy, with its registered office at Emmastraat 23, 2282 AM Rijswijk, the Netherlands, registered with the Dutch Chamber of Commerce under number 27299029. You can reach us about privacy at mik@joinaitonomy.ai.
The personal data we collect
When you visit the website. We collect limited technical data such as your IP address, device and browser type, and the pages you view, through our own self-hosted, cookieless analytics (Umami). We use this only in aggregate to secure and improve the site, on the basis of our legitimate interest; it is not used to identify you. Our use of cookies and similar technologies is described in our Cookie Policy.
When you contact us. If you fill in a form or email us, we collect the details you provide, such as your name, business email, company, role and message. Form submissions are handled by our own contact service and delivered to us by email through Scaleway Transactional Email (an EU provider) so that we can respond to you.
When you use the platform. We process account data for the people a customer authorises to use the platform, such as name, business email and role, to set up and administer their access. We also process usage and audit data generated as the platform runs, such as sign-in events and a record of the actions agents take, including model and tool calls, which we use to operate, secure, govern and bill the service. Separately, the data and content a customer connects to or processes through the platform — for example from their documents, records and business systems — is Customer Data. It may contain personal data, and we process it only as a processor on the customer’s instructions under the Data Processing Agreement, not under this statement. We do not use Customer Data to train AI models.
Business contacts. In the course of our work we hold business contact details of prospects, customers and partners, such as name, role, company and business email, collected from you or from public professional sources.
Why we use it
We use personal data to respond to enquiries and provide information, on the basis of our legitimate interest or steps taken at your request before entering a contract. We use it to provide and administer the platform and our services and to manage the customer relationship, on the basis of performance of a contract. We use it to secure and improve our website and services, on the basis of our legitimate interest. Where permitted, we may send you relevant updates about our services, on the basis of our legitimate interest or your consent, and you can opt out at any time. We also use personal data where the law requires it.
What we do not do
We do not sell personal data. We do not use it for advertising, and we do not track you across other websites or build a profile of you for marketing.
Who we share it with
We share personal data with service providers that process it on our behalf, such as our cloud hosting and email providers, under agreements that require them to protect it. The third parties that process data through the platform are set out in our Sub-processors list. We may also share personal data where the law or a competent authority requires it, and in connection with a reorganisation or sale of our business. We do not share personal data with third parties for their own marketing.
International transfers
We process personal data within the European Economic Area (EEA), and our current providers are located in the EEA, so we do not transfer your personal data outside the EEA. If this ever changes, we will rely on a valid transfer mechanism, such as an adequacy decision or the European Commission’s standard contractual clauses, and update this statement.
How long we keep it
We keep personal data only as long as needed for the purpose for which we collected it, or as the law requires. Enquiry data is kept for the duration of the conversation and a reasonable period afterwards. Customer and account data is kept for the duration of the relationship and any statutory retention period that applies.
How we protect it
We apply appropriate technical and organisational measures to protect personal data against loss and unlawful processing. The measures that apply to the platform are set out in the Data Processing Agreement.
Your rights
You have the right to access the personal data we hold about you, and to have it corrected or deleted. You may also object to or ask us to restrict certain processing, ask for a copy of the data you provided in a portable form, and withdraw consent where processing is based on it. To exercise a right, email mik@joinaitonomy.ai. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
Cookies
Our website uses cookies and similar technologies. How and why is set out in our Cookie Policy.
Changes to this statement
We may update this statement from time to time. The version published here is always the current one, and the date above shows when it last changed.
Contact
Questions about this statement or about how we handle personal data: mik@joinaitonomy.ai.