Privacy policy

For the United Kingdom the data controller is SVENNIS CLOUD SOLUTIONS LTD, registered in England and Wales, company number 13852193, registered office 117 Upper Chorlton Road, Manchester M16 7RY. Outside the UK the controller is SVENNIS CLOUD SOLUTIONS S.R.L. (CUI 29108532), Satu Mare, Romania. For anything related to your data, contact office@svennis.ai.

The business description you type into our analysis tool (the Mirror). We recommend you do not include personal data in it: the tool only needs information about the business, not about people.

Your email address, only if you choose to leave it to receive your analysis or be contacted.

Your answers to the AI readiness assessment, if you take it.

Your IP address and the country derived from it, used for rate limiting, security and showing content for your market.

We do not create accounts, ask for passwords or collect data through hidden forms.

If you accept statistics in the cookie banner: how you use the site, collected by Google Analytics (see "Statistics with Google Analytics" below).

To generate the analysis you request: performance of the service you ask for (Art. 6(1)(b) GDPR, and the equivalent under UK GDPR).

To contact you when you leave your email: your consent (Art. 6(1)(a)), which you can withdraw at any time by writing to office@svennis.ai.

For security and abuse prevention: our legitimate interest in protecting the service (Art. 6(1)(f)).

To understand how the site is used and improve it, if you accept statistics: your consent (Art. 6(1)(a) UK GDPR), which you can withdraw at any time through "Cookie settings" in the footer.

Vercel Inc. (USA): website hosting and storage of saved analyses. Transfers rely on the EU Standard Contractual Clauses.

Anthropic PBC (USA): your business description is processed by Claude models to generate the analysis. Under Anthropic's commercial terms, API data is not used to train models. Transfers rely on Standard Contractual Clauses.

Zoho Corporation: if you leave your email, your request lands in our CRM, hosted in Zoho's European Union data centres.

Google (Google Analytics 4): statistics about how the site is used, only if you accept them. See "Statistics with Google Analytics" below.

If you accept statistics in the cookie banner, we use Google Analytics 4 to count visits and see which pages and buttons are used, so we can improve the site. Until you accept, no Google script loads and nothing is sent to Google. If you reject or close the banner, Google Analytics does not run.

Google Analytics collects the pages you view, the buttons you use, the page you came from, your browser and device type, your approximate location (country and city, estimated from your IP address) and a random identifier stored in the cookies _ga and _ga_5KWHDB9XFY. We do not send Google your name, your email or anything you type into the site, and the pages of saved analyses are not measured. Google Signals and ad personalisation are switched off, and we do not use the data for advertising.

We do this on the basis of your consent (Article 6(1)(a) UK GDPR), given in the cookie banner as regulation 6 of the Privacy and Electronic Communications Regulations 2003 requires. You can withdraw it at any time through "Cookie settings" in the footer of every page. Withdrawing stops Google Analytics and removes its cookies from your browser. It does not affect what was collected before.

Google processes the data for us as our processor, under Google's data processing terms. The cookies last up to 13 months from your last visit. Google keeps the event-level data for 14 months and then deletes it. The totals in our reports, such as visits per month, are kept as statistics that do not identify you.

Google may process the data in the United States. Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as providing adequate protection (the Data Protection (Adequacy) (United States of America) Regulations 2023).

Saved analyses stay available at the unique link generated for you until you ask us to delete them.

Contact details you leave are kept for the duration of the commercial conversation and at most 3 years after the last contact, then deleted.

Technical logs containing IP addresses are deleted automatically within 30 days.

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. Write to office@svennis.ai. We respond without undue delay and in any case within one month of receiving your request. For complex requests we may extend that by up to two further months, and we will tell you within the first month if we do.

If you are unhappy with how we have handled your personal data, tell us first and we will look into it. Email office@svennis.ai with "data protection complaint" in the subject line. The complaint reaches us electronically, costs you nothing, and is handled separately from any commercial correspondence.

We will acknowledge your complaint in writing within 30 days of receiving it, tell you who is dealing with it, and respond substantively without undue delay.

You do not have to complain to us first. You can go straight to a supervisory authority, and you can go to one after complaining to us whether or not you are satisfied with our answer: in the UK, the Information Commissioner's Office (ico.org.uk); in Romania, ANSPDCP (dataprotection.ro); or the authority in your country of residence or work.

The analyses this site generates are informational AI-assisted estimates. They have no legal effect on you and are not automated decisions within the meaning of Art. 22 GDPR.

If we change this policy, we publish the new version on this page with its update date. The current version is the one shown above.