Upcoming Privacy Policy

Cognit Consulting AB will process personal data only as documented in the Terms of Service, this Privacy Policy, and any applicable Data Processing Agreement (DPA), and as otherwise required by law. Cognit Consulting AB is not obliged to accept or act on individual instructions from customers outside of the scope of these agreements.

- Use optional AI features, where AmpliFlow sends task-specific context to the approved AI provider

-

Cognit Consulting AB will process personal data only as documented in the Terms of Service, this Privacy Policy, and as otherwise required by law. Cognit Consulting AB is not obliged to accept or act on individual instructions from customers outside of the scope of these documents.

The website does not use cookies. Website analytics are handled by Rybbit, a self-hosted, cookieless analytics tool running on our own servers. Rybbit collects anonymous visitor statistics - page views, navigation patterns, outbound link clicks, and campaign parameters (such as UTM tags from ads) - so we can see which content and campaigns visitors find relevant. No personal data is collected and no data is shared with third parties.

The website does not use cookies. Website analytics are handled by Rybbit, a self-hosted, cookieless analytics tool running on our own servers. Rybbit collects anonymous visitor statistics: page views, navigation patterns, outbound link clicks, and campaign parameters such as UTM tags from ads. We use this to see which content and campaigns visitors find relevant. No personal data is collected and no data is shared with third parties.

- Analytics (website): Rybbit (self-hosted on our own servers, cookieless - collects anonymous page views, navigation, outbound clicks, campaign parameters such as UTM tags, and JavaScript errors)

- Analytics (website): Rybbit (self-hosted on our own servers and cookieless, collects anonymous page views, navigation, outbound clicks, campaign parameters such as UTM tags, and JavaScript errors)

-

- Provide optional AI features when a tenant administrator has enabled AI and approved the selected provider

- Hetzner Online GmbH: Data centers in Germany and Finland (EU). Used for internal business systems such as CRM and customer support tools. We have a signed Data Processing Agreement with Hetzner in accordance with GDPR Article 28.

- Hetzner Online GmbH: Data centers in Germany and Finland (EU). Used for internal business systems such as CRM and customer support tools. We use Hetzner under GDPR Article 28 processor terms.

No customer data is transferred outside the EU/EEA. Where third-party sub-processors operate outside the EU/EEA (e.g. optional AI services), appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are applied in line with GDPR requirements.

Core AmpliFlow service data is not transferred outside the EU/EEA in normal operation. Optional AI features are separate: if a tenant administrator approves an AI provider outside the EU/EEA, task-specific AI request data may be transferred to that provider. Appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or another valid transfer mechanism are applied in line with GDPR requirements.

- Rybbit: Self-hosted cookieless analytics running on our own servers (collects anonymous visitor statistics including campaign parameters - no personal data collected)

- Rybbit: Self-hosted cookieless analytics running on our own servers (collects anonymous visitor statistics including campaign parameters, no personal data collected)

- Sendgrid: Email delivery service

- Mailgun: Email delivery service

- Hetzner Online GmbH: Data center infrastructure in Germany and Finland (EU) - hosts our CRM and customer support systems where we store business contact information such as names, email addresses, and communication history

- Hetzner Online GmbH: Data center infrastructure in Germany and Finland (EU), hosts our CRM and customer support systems where we store business contact information such as names, email addresses, and communication history

Optional AI and cloud processors:

Optional AI providers:

If you, as a customer, actively opt in to use advanced AI features or integrations, your data may be processed by:

If your tenant administrator enables AI and approves a provider, task-specific content may be processed by the selected AI provider solely to provide the AI response. Approved provider options may include Berget AI AB, OpenAI, LLC, Google LLC, Mistral AI, Anthropic PBC, or additional AI or cloud vendors specified at the time of opt-in. No AI provider is enabled by default.

- OpenAI, LLC

AI request data may include prompts, selected context from your AmpliFlow account, referenced business content, user identifiers, tenant metadata, technical request metadata, and generated responses. We send only the context needed for the specific AI task, not the entire database.

- Google LLC (Cloud and AI services)

Provider retention and training posture depends on the selected provider and project settings. OpenAI states that API data is not used to train or improve models by default unless the customer opts in, and that abuse-monitoring logs may retain prompts and responses for up to 30 days by default unless a different approved control applies or longer retention is legally required. Berget states in its terms that it does not store actual prompt content or output from hosted LLMs.

- Mistral AI

-

- Anthropic PBC

-

- Additional AI or cloud vendors as specified at the time of opt-in

-

We may update this policy. Changes take effect when posted here. The date of the latest update is shown at the top of this page. It is your responsibility to periodically review this Privacy Policy for changes. We will not separately notify you of updates.

We may update this policy. When we make changes to this Privacy Policy or our Terms of Service, the revised version will state its effective date. Changes take effect on that stated effective date, which will be at least 30 days after publication. The date of the latest update is shown at the top of this page. It is your responsibility to periodically review this Privacy Policy for changes. We will not separately notify you of updates.