Acilio AB
Privacy Policy
Version 1.0 · 8 September 2026
Acilio AB, company number 559594-5824, Stockholm, Sweden, is the controller for the personal data described here. Contact us at privacy@acilio.ai.
What this policy covers
This policy covers personal data we process for our own purposes: website visitors, customer contacts, product users, investors and people we meet.
It does not cover data our customers put into the product, that is governed by a Data Processing Agreement.
What we process, and why
- Visitors to acilio.ai
- We use no analytics, tracking cookies or advertising tools. Our hosting provider records the technical request data needed to deliver the site securely.
- Contacts at prospective customers
- Name, role, employer, business contact details and notes from interactions. Our basis is our legitimate interest in reaching businesses we may be able to serve. You can object at any time and we will remove you.
- Users of our product
- Name, work email, role, workspace membership, sign-in events and actions in the application, so we can give you access, keep the service secure and support you. Our basis is the agreement with your employer and our legitimate interest in operating the service securely.
- Investors and their contacts
- Name, role, contact details and correspondence, on the basis of our legitimate interest in managing those relationships.
- People in meetings we record
- We keep the transcript and the names of those present. We do not keep the audio. We state in the meeting that we record, and you can ask us to stop at any point. We use one AI assistant to help us work with our own notes, and its provider does not use what we give it to train its models. Our basis is our legitimate interest in keeping accurate records, and your consent where the meeting tool or the law requires it.
- Our own staff
- Employment data including name, personal identity number, address, contact details, salary and agreements, on the basis of the employment contract and our legal obligations.
- Suppliers and advisers
- Name, business contact details and invoice data, on the basis of the agreement and our accounting obligations.
We do not process special category data. We do not make decisions about you by automated means alone.
How long we keep it
- For as long as the relationship lasts, for users of our product and our own staff.
- Two years after our last contact, for prospects, investors and meeting transcripts.
- Seven years, where the Swedish Bookkeeping Act requires it, for accounting records.
Meeting audio is deleted every quarter.
Who we share it with
Our service providers, acting on our instructions and under agreement: Google for cloud infrastructure, email and files; Notion for our internal records; Fortnox for accounting; tl;dv for meeting recording; and Anthropic for the AI assistant we use on our own notes.
We do not sell personal data and we do not share it for advertising.
Where a provider processes personal data outside the European Economic Area, we rely on the European Commission's standard contractual clauses.
How we protect it
Named individual accounts with multi-factor authentication and no shared logins. Access granted only where it is needed and removed when someone leaves. Employment data in an access-restricted folder. Credentials in a managed secret store. Encryption in transit and at rest.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to processing based on our legitimate interest, and ask for your data in a portable format. Write to privacy@acilio.ai and we will answer within one month.
If you are unhappy with how we have handled your data, you can complain to Integritetsskyddsmyndigheten, the Swedish Authority for Privacy Protection, at imy.se.
Changes
We update this policy when our processing changes. The version and date at the top tell you which version you are reading.