Only the data needed for your request.

Booking intake

• We ask for the subject, date, time slot, name, email address, optional organisation and optional explanation.
• The request is accepted only after the configured intake facility has confirmed it durably. Without that facility, the site does not show a false confirmation.
• The intake facility receives the entered data, a technical request ID, receipt time and idempotency key. Full personal data is not written to application logs.
• A shortened technical hash and temporary counters may be used to slow excessive form attempts.

Quote indication

• We use the selected configuration, contact details, consent and limited source data solely to calculate your quote indication, record it as a PDF and contact you about this request.
• Amounts from the browser are not trusted: the server validates the request and recalculates the indication according to the published pricing rules.
• Release takes place in two phases. First, the lead is durably prepared; then the configured adapter must durably accept the lead, PDF and exactly two transactional mail tasks — one for the client and one internal. Without an adapter or if an error occurs, no PDF or receipt is issued.
• The mail tasks relate only to this request and do not constitute a newsletter subscription.
• We do not process a raw IP address in the quote data. Only a country supplied by the trusted hosting layer may be recorded; if that reliable country code is absent, the country remains unknown.
• Quote data is retained only for as long as needed for the request, any resulting client relationship and applicable legal obligations.
• This public flow does not activate any production, cloud, AI or other supplier service on behalf of the applicant.

Privacy-friendly product analytics

• Fields: event ID, event name, timestamp, route, language and, only where needed, a limited category for viewport, selected segment or service route, context, failure class or experiment variant. We do not collect a name, email address, free text, raw IP address or referring URL for this purpose.
• Purpose: understand which public pages and steps are used, measure conversion and failures at aggregate level and improve the site. The lawful basis is our legitimate interests in a usable, reliable and privacy-friendly website; we do not use these data for advertising profiles.
• Recipients: AIOW and our contracted hosting and database processors for this purpose. We do not sell the data or share them with advertising networks.
• Raw analytics events and associated idempotency material are deleted after 30 days.
• Aggregated daily totals do not contain an event ID or directly identifying fields. AIOW determines and reviews their retention period, restricts access and can delete these totals when they are no longer needed for trend analysis.

Retention and sharing

Booking data is retained for no more than 90 days during the pilot, unless earlier deletion is possible or an ongoing client relationship or legal obligation justifies longer retention. Data is not sold. Only AIOW and the contractually selected intake/hosting service process it for this purpose.

Your rights and contact

You may request access, correction or deletion. Use info@aiow.io or the contact details from your existing AIOW relationship. Do not include sensitive content that is not needed to locate your request.