Privacy Policy

Dedal (“we” or “us”) operates the dedal.ai website. We are the controller for the personal data described in this policy. For anything related to your data, contact us at contact@dedal.ai.

Our website is a static site. You can browse it without creating an account and without us setting any tracking cookies. We process personal data in these situations: - Contact form: when you send us a message, we receive the name, email address and message text you enter. - Liktor early access list: when you sign up on dedal.ai/liktor, we receive your email address and, if you give them, your name, firm or organisation, role and the AI assistant you use, along with the language of the page. We use these details only to invite you to try Liktor. They are stored with Resend as a contact list (see section 3) and kept until you get access to Liktor or ask us to remove them. To be removed, reply to our confirmation email or write to contact@dedal.ai. - Spam protection: the contact form and the Liktor early access list use Cloudflare Turnstile. To check that you are not a bot, Turnstile sends Cloudflare your IP address, your browser’s user agent and technical details of its connection (a TLS fingerprint). - Server logs: our hosting provider Cloudflare processes technical data such as IP addresses in server logs to deliver the site securely and reliably.

We work with a small number of service providers: - Cloudflare, Inc. (USA) — hosts the website and the service that receives our forms (Cloudflare Workers), and provides Turnstile and Web Analytics. Cloudflare handles requests in data centres around the world and stores data mainly in the USA and the European Economic Area. It acts on our behalf, except that it also uses Turnstile’s signals as an independent controller to improve its bot detection. - Resend (Plus Five Five, Inc., USA) — sends the emails from our contact form and the Liktor early access list, and keeps that list as contacts. Resend stores this data, including email metadata and logs, in the USA. - Cal.com, Inc. (USA) — if you open the booking dialog on our contact page, the Cal.com scheduling tool loads and processes the details you enter to book an appointment. All three are certified under the EU–US Data Privacy Framework and its UK Extension (Cloudflare also under the Swiss–US Data Privacy Framework), so transfers to them rely on the European Commission’s adequacy decision for that framework (Art. 45 GDPR). The data processing agreements of Cloudflare and Resend also include the EU Standard Contractual Clauses.

We process your data under Art. 6(1)(b) GDPR — taking steps at your request, such as handling your inquiry, scheduling a call or putting you on the Liktor early access list — and Art. 6(1)(f) GDPR — our legitimate interest in protecting the site against spam and abuse and operating it securely.

We use Cloudflare Web Analytics, a privacy-first measurement tool: it sets no cookies, does not fingerprint devices and does not track you across sites. It gives us aggregated metrics (page views, load performance, country, browser) without identifying individual visitors. Our legitimate interest in understanding site usage is the legal basis (Art. 6(1)(f) GDPR). Beyond that we use no advertising and no tracking cookies of any kind. The only thing stored in your browser is a localStorage entry with your theme preference (light or dark). It is not a cookie, contains no personal data and never leaves your device.

We keep inquiry emails only as long as needed to handle the matter, then delete them. Details on the Liktor early access list are kept until you get access to Liktor or ask us to remove them. Server logs are retained by Cloudflare under its own retention policies.

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. To exercise any of these rights, email us at contact@dedal.ai.

If you believe our processing of your data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

We may update this policy when our website or our service providers change. The current version is always published on this page, together with the date of the last update.