Privacy Policy

Last updated: 13 May 2026

1. Who we are

This Privacy Policy explains how we collect, use, and protect your personal data when you visit auttomix.com or use our services.

Data Controller:

Daniel Giovani M.

Email: info@auttomix.com

For any questions about how we process your data, you can contact us directly at info@auttomix.com.

2. What data we collect and why

2.1 Data you provide

When you fill out a contact form, send us an email, or use the AI Avatar Widget on our website, we may collect:

  • Name
  • Email address
  • Phone number
  • Company name and job title
  • The content of your message or conversation

Legal basis: Article 6(1)(b) GDPR (pre-contractual steps) and Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries and developing our business).

2.2 Data collected automatically

When you visit our website, technical data is collected via two analytics providers:

  • Google Analytics 4 — usage analytics, pages visited, session duration, general geographic area, device type. IP anonymised.
  • PostHog — product analytics and session recordings (inputs masked by default). Hosted on PostHog Cloud EU (Frankfurt, Germany). IP anonymised.

Legal basis: Article 6(1)(a) GDPR (your consent via the cookie banner). Neither provider receives data until you give your consent.

3. Who we share your data with

We do not sell or rent your personal data. We share it only with the following processors that provide us with technical infrastructure:

ProviderRoleLocation
Vercel Inc.Website hostingUSA (Standard Contractual Clauses)
Railway Corp.Backend service hostingUSA (Standard Contractual Clauses)
Supabase Inc.Contact and conversation databaseEU (Frankfurt)
Google LLCGoogle Analytics 4, Gemini API (Widget language model), Google Cloud Speech-to-TextUSA (Standard Contractual Clauses)
Beyond Presence GmbHAI Avatar renderingEU (Germany)
PostHog Inc.Product analytics and session recordingsEU (Frankfurt) — PostHog Cloud EU

For transfers outside the EEA, we rely on the European Commission's Standard Contractual Clauses (Decision 2021/914) as the legal basis for transfer.

We may also disclose data when required by law, court order, or to protect our rights.

4. How long we keep your data

Data categoryRetention period
Contact form submissions24 months from last contact
AI Avatar Widget conversations12 months
Google Analytics data14 months (GA4 default)
PostHog events and session recordings30 days
Client relationship dataDuration of contract + 5 years for tax/legal purposes

After these periods, data is deleted or anonymised.

5. Your rights

Under the GDPR, you have the following rights:

  • Access the data we hold about you (Article 15)
  • Rectification of inaccurate data (Article 16)
  • Erasure - "right to be forgotten" (Article 17)
  • Restriction of processing (Article 18)
  • Portability of your data (Article 20)
  • Objection to processing (Article 21)
  • Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any right, email info@auttomix.com. We respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifisias 1-3, 11523 Athens · tel. +30 210 6475600 · www.dpa.gr.

6. Artificial Intelligence disclosure

In accordance with Article 50 of Regulation (EU) 2024/1689 (AI Act), we inform you that our website uses an AI Avatar Widget powered by Artificial Intelligence to handle enquiries. When you interact with it, you are interacting with an AI system, not a human. You are informed of this before the conversation begins - a notice is displayed on the Widget interface.

7. Security

We implement appropriate technical and organisational measures to protect your data: encryption in transit (TLS 1.3), encryption at rest, access controls, and regular security audits. No transmission method is completely secure, but we are committed to using the best available standards.

8. Minors

Our services are not directed at individuals under the age of 18, and we do not knowingly collect data from minors.

9. Changes to this Policy

We will update this page if our practices change. The "Last updated" date at the top shows when the last change was made. Significant changes will be communicated by email if we hold your contact details.

10. Contact