Privacy Policy

This Privacy Policy explains how Popoli AB, a Swedish company with registration number 559348-1509, operating under the brand Deployed AI ("Deployed", "we"), handles personal data on our website getdeployed.ai and in our product Deployed OS. We comply with the EU General Data Protection Regulation (GDPR).

1. Who this policy covers#

1.1Visitors to getdeployed.ai. We are the controller for personal data collected on the website.

1.2Customers and Users of Deployed OS. We are the controller for a limited set of data that we need to run our business and keep the service secure, described in section 3.

1.3Data that our customers put into Deployed OS. When a company uses Deployed OS, that company is the controller for its data, and we process it on the company's behalf as a processor under our Data Processing Agreement (getdeployed.ai/legal/dpa). If you use Deployed OS through your employer, your employer's own privacy notice applies to that data, and requests about it should go to your employer. We will forward any such request we receive.

2. The website#

2.1Contact form. When you submit our contact form, we collect your name, company, team size and message, to respond to your inquiry and understand whether our services fit your needs. The form is handled by Formspree, which forwards the submission to us. Legal basis: our legitimate interest in responding to inquiries.

2.2Analytics. Google Analytics shows us how the website is used. It sets cookies only if you accept them in the cookie banner. If you decline, Google receives only signals without cookies or identifiers, which it uses to estimate overall traffic. Data is processed by Google Ireland Limited and may be transferred to the United States under the EU-US Data Privacy Framework. Legal basis: your consent. Ahrefs Web Analytics counts visits without cookies and, according to Ahrefs, without collecting personal data.

2.3Cookies. The only cookies on the website are set by Google Analytics, and only if you accept them: _ga (distinguishes visitors) and _ga_<ID> (keeps track of the current visit), each stored for up to 2 years. We use no advertising cookies. You can change your choice at any time with the Cookies link at the bottom of every page. Your choice itself is saved in your browser's local storage, not in a cookie.

3. Deployed OS: data we are responsible for#

3.1Customer contacts. Names, work email addresses and phone numbers of the people at our customers who sign agreements, receive invoices or contact our support. Purpose: to enter into and perform our agreements, invoice and give support. Legal basis: performance of a contract and our legitimate interest in managing customer relationships.

3.2Sign-in and security. When you sign in to Deployed OS, we process your email address, sign-in method, session data, IP address and browser user agent to authenticate you, protect accounts and investigate misuse. Legal basis: our legitimate interest in keeping the service secure.

3.3Service emails. We send invitations, email verification and password reset emails to the address you or your administrator provide. These are not marketing emails.

3.4Usage statistics. We use statistics that do not identify any customer or person, such as the number of calls and performance data, to operate and improve Deployed OS.

3.5What we never do. We do not sell personal data, do not use it for advertising, and do not use customer data or personal data to train AI models.

4. Sign-in with Google and Microsoft#

4.1If you choose "Continue with Google" or "Sign in with Microsoft", we receive your email address, name and account identifier from Google or Microsoft. We use them only to sign you in and link your account. We do not keep Google's or Microsoft's sign-in tokens.

4.2If your organisation enables a Google or Microsoft Connector, Deployed OS receives an access token that lets it read, and where your organisation allows it, change, data in that system on your behalf, when you ask your AI Tool to do so. The token is stored encrypted and is deleted when you disconnect or your account is disabled. Content retrieved through a Connector passes through Deployed OS to your AI Tool and is not stored by Deployed OS.

4.3Deployed OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google or Microsoft is used only to provide the features you or your organisation have chosen, is not used for advertising, is not sold, is not used to train AI models, and is not read by our staff except with your organisation's permission, for security reasons, or where required by law.

5. Who we share data with#

5.1We use service providers to run the website and Deployed OS. The providers for Deployed OS, what they process and where, are listed on our Sub-processors page (getdeployed.ai/legal/subprocessors). The providers for the website are named in section 2.

5.2We may disclose personal data where required by law or by order of a public authority.

6. Where data is stored and transfers#

6.1Deployed OS data is stored in the EU (Stockholm, Sweden). Some providers, such as those for network protection, email delivery, sign-in and analytics, are established in the United States. Transfers take place under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep data#

7.1Contact form submissions: up to 12 months, unless a business relationship is established.

7.2Customer contacts and agreement records: for the duration of the customer relationship and as long as required by Swedish accounting law afterwards.

7.3Sign-in sessions: 7 days. Security and audit logs in Deployed OS: as set by the customer, 365 days by default.

8. Security#

8.1We protect personal data with technical and organisational measures, including encryption in transit and at rest, isolated environments per customer, personal accounts with multi-factor authentication for our staff and logging of access. The measures for Deployed OS are described in Annex 2 of our Data Processing Agreement.

9. Your rights#

9.1You have the right to request access to, rectification or erasure of your personal data, to restrict or object to our processing, and to data portability. Where we rely on your consent, you may withdraw it at any time.

9.2To exercise your rights, contact us at poyan@getdeployed.ai. We respond within 30 days. For data that your employer controls in Deployed OS, see section 1.3.

9.3You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se), or with the data protection authority where you live or work.

10. Contact#

Popoli AB (operating as Deployed AI), registration number 559348-1509

Data protection contact: Poyan Karimi, poyan@getdeployed.ai

11. Changes to this policy#

11.1Every version of this policy has a version number, an effective date and its own permanent address, and earlier versions remain available in the version history. We will notify Deployed OS customers by email of material changes.