Privacy Policy

Hiiko AS is the controller for personal data collected through this website.

Hiiko AS
Organisation number 938 303 924
St. Olavs gate 11D
0165 Oslo, Norway
hello@hiiko.ai

This policy covers https://www.hiiko.ai only. Personal data in the Hiiko product is covered by the agreement for that deployment, not by this page.

Through this website we may collect:

• Details you send in the interest form: name, work email, title, company, industry, the kind of request (a pilot, a note to follow, or a waitlist), and any message you add.
• Technical data needed to deliver the site, such as IP address, browser type, and the time of the request. The host keeps this in server logs.

The website does not use advertising cookies and does not ask you to accept a cookie banner. If visit statistics are turned on, they are collected with Plausible Analytics, which does not set a cookie and does not identify you.

We use the interest form to:

• reply to the request you sent;
• keep a record of that conversation;
• tell you when you asked to hear that Hiiko is relevant for your industry.

The legal basis is steps you asked us to take before a possible contract, and our legitimate interest in answering a business enquiry you sent us (GDPR Articles 6(1)(b) and 6(1)(f)).

Server logs are used to run and protect the website. The legal basis is our legitimate interest in keeping the site available and secure (GDPR Article 6(1)(f)).

We do not sell personal data, and we do not use it for advertising.

These providers process data on our instructions, only for the purpose described:

• Notion stores interest submissions so the Hiiko team can follow up.
• Vercel hosts the website and processes the technical data needed to deliver it.
• Resend sends Hiiko a copy of an interest submission by email, when that notification is turned on.
• Plausible Analytics receives aggregated visit statistics, when analytics are turned on. It does not receive the contents of the interest form.

Notion, Vercel, and Resend may process data outside the EEA. Where they do, the transfer rests on the EU Standard Contractual Clauses or on an adequacy decision, including the EU-US Data Privacy Framework where the provider is certified under it.

An interest submission is kept while the conversation is active, and for up to 24 months after the last contact. It is then deleted, unless we need it longer to document an agreement or a legal claim. You can ask us to delete it sooner.

Server logs are kept for the period the host retains them for security and operations, and are not used as a contact list.

You can ask for access to the personal data we hold about you, for a correction, for deletion, for restriction of processing, and for a copy of the data you gave us. You can object to processing that is based on legitimate interest.

Write to hello@hiiko.ai. We may need to confirm that the request comes from you.

You can also complain to the Norwegian Data Protection Authority, Datatilsynet, at datatilsynet.no.

If this policy changes, the new version is published on this page with a new date.