Last updated:

August 12, 2026

Early Access Privacy Notice

1. Introduction and Scope

This Early Access Privacy Notice supplements the standard Buddywise Privacy Policy and describes the collection and processing of additional data during your use of the Buddywise Early Access Program as necessary to provide, evaluate, and improve our experimental artificial intelligence features.

Data Controller: Buddywise AB, org. no. 559254-9777, located at Mailbox 709, 114 11 Stockholm, is the Data Controller for the personal data described in this notice.

2. What Personal Data We Collect

When you use the AI features, you can ask questions about your site's safety data in plain language. To see what works, what breaks, and how to improve the feature, we collect the following:

  • Your Questions & AI Answers: The exact questions you type and the charts, tables, and text the AI returns to check answer quality and catch mistakes.
  • Contextual Site Data: The relevant data from your site held in our database that the AI needs to answer your question. We do not process identifying or sensitive data, and as with our core service, no facial recognition is used and faces are blurred.
  • Performance Telemetry: Diagnostics including cost, response time, token usage, and model version.
  • Your Feedback: Thumbs up/down ratings and any written comments you provide on an answer to help us prioritize fixes.
  • Product Analytics: Standard app-wide interaction patterns processed via PostHog, which are anonymized by default unless you have separately consented to tracking.

IMPORTANT NOTICE: Because the AI reads whatever you type, please avoid entering names or personal details of individual people in your questions or feedback.

3. How We Use the Data

Buddywise will use this personal data to research and improve the Early Access feature. Buddywise will never use your personal data for advertising, and will never sell it.

4. Legal basis

Buddywise will process the personal data based on your consent. You may withdraw your consent at any time. Such withdrawal does not, however, affect the lawfulness of processing based on consent before its withdrawal.

5. Who Processes the Data (Sub-processors) and where

To power this feature, your personal data is processed by the following approved sub-processors, with strict tenant isolation ensuring your personal data is kept separate from other customers:

  • Google (Gemini): Acts as an external processor to generate the AI answers. Personal data may be transferred outside of the EU/EEA and such transfer is governed by Standard Contractual Clauses.
  • Microsoft Azure (EU - Sweden): Our own infrastructure tenant where your conversation history is stored.
  • PostHog (EU/EEA): Used for anonymized product analytics.

6. Data Retention and Your Rights

We apply strict retention limits to personal data collected during the Early Access Program:

  • Retention: Usage data, diagnostic traces and any other data to be considered personal data are automatically deleted 90 days after they are collected. Conclusions derived from it are retained only in anonymised, non-identifiable form.
  • Leaving the Early Access Program: If you leave the Early Access Program, or when the Early Access Program ends, we stop collecting personal data immediately and delete everything we still hold within 30 days.

You have the right under this Privacy Notice, and by law if you are within the EU, to:

  • Request access to your personal data. The right to access the personal data we have about you, also enabling you to receive a copy of the personal data we hold about you.
  • Request correction of the personal data. You have the right to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal data. You have the right to ask us to delete or remove personal data when there is no good reason for us to continue processing it.
  • Request the transfer of your personal data. We will provide to you, or to a third-party you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use.

You can leave the Early Access Program or exercise these rights at any time by emailing us at info@buddywise.co. Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, if you are in the European Economic Area (EEA), please contact your local data protection authority in the EEA.