1. Controller
Amazive AB, Odengatan 38, 113 51 Stockholm, Sweden ("amazive", "we", "us") is the data controller for personal data processed through amazive.se and amazive.ai.
Contact: alexandra@amazive.ai
2. What data we collect
- Contact form: first name, last name, email, phone (optional), company (optional), message.
- Plan upload form: first name, last name, email, phone (optional), industry, referral source, uploaded files, and message.
- Trial sign-up: name, work email, company, billing email, VAT / company registration number, billing address, selected plan, estimated line items per month, number of seats, scheduled onboarding time, and any notes you provide. Payment details are collected and processed by our payment processor; we do not store full card numbers on our servers.
- Uploaded files: the files you upload (e.g. architectural plans, spreadsheets, specifications) and any personal data contained in them. You are responsible for ensuring you have the right to share that content with us.
- Newsletter: email address.
- Service usage data: log data, IP address, device and browser information, timestamps, and actions taken in the service, used for security, debugging and abuse prevention.
- Analytics (if you consent): anonymized usage data via Google Analytics 4 (pages visited, device type, approximate location at country level). IP addresses are anonymized.
- Cookies: only set after explicit consent. See our Cookie Policy.
3. Purpose and legal basis
- Contact & plan submissions: to respond to your inquiry and provide our services (Art. 6(1)(b) GDPR — contractual necessity).
- Trial and paid subscriptions: to set up your account, deliver the service, process payments, prevent fraud, comply with tax and accounting obligations, and manage the customer relationship (Art. 6(1)(b) and 6(1)(c) GDPR — contract and legal obligation).
- Processing of uploaded files: to perform the AI-powered takeoff, data extraction and quote preparation you have asked us to perform (Art. 6(1)(b) GDPR — contractual necessity).
- Security, abuse prevention and product improvement: our legitimate interest in operating, securing and improving the service (Art. 6(1)(f) GDPR).
- Newsletter: to send product updates (Art. 6(1)(a) GDPR — consent). You can unsubscribe at any time.
- Analytics: to improve our website (Art. 6(1)(a) GDPR — consent via cookie banner).
4. Data sharing
We do not sell your personal data. We share data with the following processors, under appropriate safeguards:
- Cloud infrastructure providers (database, storage and hosting, EU/US) — EU Standard Contractual Clauses in place where data is transferred outside the EEA.
- AI model providers used to process uploaded files and generate outputs, under contractual commitments that prohibit using your content to train their models.
- Resend (transactional email) — for sending notification and welcome emails.
- Payment processor — for processing trial conversions, subscription fees and invoicing.
- Calendar / scheduling provider — for booking and managing onboarding calls.
- Google Analytics (analytics, US) — only with your consent; IP anonymization enabled.
- Authorities, advisors and acquirers: where required by law, to enforce our rights, or in connection with a corporate transaction (merger, acquisition or asset sale).
We do not use your uploaded content or personal data to train third-party AI models, and we contractually require our AI providers not to do so.
5. International transfers
Some of our service providers are based in the United States. We ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) and, where applicable, additional technical measures.
6. Retention
- Contact and plan submissions: retained for 24 months or until the inquiry is resolved, whichever is longer.
- Trial and customer account data: for the duration of the customer relationship and up to 24 months thereafter, except where a longer retention is required by law (e.g. invoices and accounting records, which we retain for 7 years under Swedish bookkeeping law).
- Uploaded files: retained for the duration of the engagement and deleted on request or within a reasonable period after the relationship ends, unless retention is necessary to establish, exercise or defend legal claims.
- Newsletter subscribers: until you unsubscribe.
- Security and log data: typically up to 12 months.
- Analytics data: retained per Google Analytics default retention (14 months).
7. Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
To exercise your rights, contact us at alexandra@amazive.ai. Some rights may be limited where data is retained to comply with legal obligations or to defend legal claims.
8. Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, role-based access controls, isolated storage for uploaded files, audit logging, and regular security reviews. No internet-based service can be guaranteed 100% secure, and you share information with us at your own risk.
9. Content you upload about other people
If your uploaded files or submissions contain personal data of third parties (for example, names, contact details or signatures on architectural drawings), you are the controller of that data and you confirm that you have a lawful basis to share it with us. amazive acts as a processor of that content on your behalf, strictly to provide the services described above.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "last updated" date above and, where appropriate, by email or in-product notice.