Privacy statement

Last updated: August 2026

About this translation

This is a translation of our Dutch privacy statement. In case of any difference between the two, the Dutch text applies. You can find it at aistudio.nl/privacypolicy.

1. Who we are

AIStudio B.V. is the controller for the processing of personal data described in this privacy statement. The AIStudio software is developed and maintained by our sister company DIJ, a trade name of De Internet Jongens B.V. For privacy questions you can reach us at privacy@aistudio.nl.

2. Which data we process

Website visitors (aistudio.nl)

• IP address and browser data (anonymised)
• Page visits and click behaviour (through analytics)
• Cookies (see section 5)

Forms on the website

This covers the contact form, registration for an event, the request for the security and privacy pack, and the AI Grip Scan.

This data goes into a database at Supabase, in an environment in Frankfurt (Germany). We use it to reply, to handle your request and to tailor our offer to your situation.

We also record your request in our CRM system HubSpot, so the colleague who contacts you knows what you asked for. That holds your name, email address, phone number, company name and role, together with the content of your message and, for the AI Grip Scan, your answers and the resulting score.

• Name, email address, phone number
• Company name and role
• The content of the message or request
• For the AI Grip Scan: the answers you give and the score that follows from them

Business contacts and clients

• Name, email address and phone number of contact persons
• Company details (name, address, chamber of commerce number)
• Correspondence and meeting notes

Users of the AIStudio Assist platform

For use of the AIStudio Assist platform and the mobile app, AIStudio acts as a processor on behalf of the client (the controller). The processing of personal data in the platform and the mobile app is governed by the data processing agreement that forms part of the client agreement. This privacy statement does not apply to that processing. Contact your employer for information about how your data is processed in the platform and the mobile app.

Users of the AIStudio Assist mobile app

The AIStudio Assist mobile app is intended for AIStudio clients. Through the app users can sign in, record conversations and have them processed inside the AIStudio Assist platform. In that context the following data may be processed, among others:

For the substantive processing of personal data through the mobile app, AIStudio acts in principle as a processor on behalf of the client. The app uses microphone access solely to record conversations.

• name, email address and login details;
• audio recordings of conversations started by the user;
• transcripts, summaries and other output resulting from that processing;
• technical data needed to run, secure and support the app, such as app version, operating system, IP address and log or error messages.

3. Purposes and legal bases

4. Who we share data with

We share personal data only with parties that process it on our behalf, and only where that is needed for the service. With every one of them we have a data processing agreement.

A full overview of the sub-processors we engage, with the activity, retention period, place of establishment, data region and safeguards per party, is on the sub-processor overview (in Dutch).

We do not sell data. For advertising measurement we place cookies from the parties listed below, only after you have given consent.

5. Cookies and measurement on the website

We do not sell data. For advertising measurement we place cookies from the parties below, only after your consent. What we do is split into what is allowed without consent and what is not.

Statistics, without consent

For visitor numbers we use Simple Analytics, a Dutch company that stores the data in the Netherlands. Simple Analytics sets no cookies, keeps no IP addresses and builds no profile of you. So we see how many people view a page and which source they came from, but not who you are. Because no personal data is processed and nothing is placed on your device, no consent is needed for this.

How far visitors get in the AI Grip Scan, without consent

For the AI Grip Scan we track how far visitors get: at which question someone stops, whether the last step came into view and whether the scan was completed. For a completed scan we also keep the sector, the size of the organisation and the outcome. We do that to see which questions are too heavy or unclear.

We keep no name, no email address, no IP address and no data about your browser. To tie the steps of one scan together we use a random number that sits in your browser for as long as the tab is open and disappears afterwards. So nothing in it identifies you, and no cookie is placed on your device. That is why no consent is needed. We keep this data for twelve months.

Company recognition, only with consent

If you give consent, we use Snitcher to recognise which company a visit comes from. That happens on the basis of the IP address and produces company details: name, sector, size and which pages were viewed. We use that to understand which organisations our information is relevant for and to get in touch in a targeted way.

Without your consent we do not load this script. We keep your choice for a year in your own browser storage, not in a cookie. You can change your choice at any time through Cookie settings, also at the bottom of every page. If you withdraw consent, recognition stops from that moment.

Advertising measurement and usage analysis, only with consent

If you give consent, we load Google Tag Manager. That is not a measurement service but a management tool through which the scripts below are placed. Without your consent we do not load Tag Manager, and therefore none of those scripts.

These parties place cookies on your device and receive your IP address, data about your browser and device, and which pages you view with us. They can combine that with data they already hold about you, for instance because you have an account with them. We have no view of what they do with it beyond that; their own terms apply there.

If you complete the AI Grip Scan, we also report that completion directly from our server to Meta, without going through your browser. We send your email address as an encrypted fingerprint, so not as a readable address, together with the outcome of your scan. We do that to measure the results of our advertising. This too only happens if you have given consent.

• Google Analytics, to see how the site is used: which pages you view, in what order and for how long
• Google Ads and the advertising pixels of Meta, TikTok and LinkedIn, to measure which advert led to a visit or a request and to show you more relevant adverts afterwards
• Hotjar, to see how visitors interact with a page, for instance how far they scroll and where they click

Your AI Grip Scan report

If you complete the AI Grip Scan, we email you a personal link to your report. We track when that report is opened and from how many different devices. We do that to know whether the report arrived and was read, and to tailor the conversation to it. We state this explicitly, because we would consider it wrong to do it quietly.

We keep no IP address and no browser data for this. From those two together we make an encrypted fingerprint from which nothing can be traced back; with it we can only count how many different devices opened the report. So we do not know who they were. A report link works for 90 days and then expires. If you want us to revoke the link sooner or delete the views, email privacy@aistudio.nl.

Other

The demo page holds a Calendly scheduling window, which sets its own cookies as soon as you use it. Videos are embedded through the privacy-friendly variant of YouTube. You can always block or delete cookies through your browser settings.

6. Retention periods

We do not keep personal data longer than necessary:

• Data from forms on the website, including the answers to the AI Grip Scan: at most 1 year in the database behind the website, unless a client relationship arises. A daily task in the database deletes older submissions automatically
• The same data in our CRM system: for as long as there is an active sales process or a client relationship. If it comes to nothing, we delete the contact. You can also ask us to, see point 7
• Client data: for the term of the agreement and the statutory retention period afterwards (7 years for tax data)
• Website analytics: at most 26 months (anonymised)
• Recordings, transcripts and other output through the mobile app and the platform: according to the retention policy set by the client in the application

7. Your rights

Under the GDPR you have the right to:

You can submit a request through privacy@aistudio.nl. We respond within 30 days. If you have a complaint about how we handle your data, you can submit it to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

• access your personal data
• have your personal data corrected or deleted
• withdraw your consent (where applicable)
• object to the processing
• submit a request for data portability

8. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. The AIStudio platform is designed, developed and maintained inside an information security management system certified to ISO 27001:2023 and NEN 7510:2017, held by DIJ, which develops and maintains the AIStudio software. The scope of those certificates is information security in designing, developing and maintaining web applications together with clients, which covers the AIStudio platform. Certification in the name of AIStudio itself is in progress, expected to complete in the fourth quarter of 2026. Confidentiality and the processing of client data inside the platform and the mobile app are governed by the agreements between the client and AIStudio.

9. Changes

We may amend this privacy statement. The most recent version is always available at aistudio.nl/privacypolicy. For material changes we will inform you through the website or by email.