Privacy Statement

askeve.ai

Last updated: March 2026

1. Introduction

This Privacy Statement explains how Flow IT BV ("we", "us", "our") collects, uses, and protects personal data when you visit our website at askeve.ai (the "Website"). We are committed to safeguarding your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Belgian data protection legislation.

This statement applies solely to data collected through the Website. If you use the Ask Eve AI platform as a registered user or customer, additional terms and a separate Data Processing Agreement (DPA) may apply.

2. Data Controller

The data controller responsible for the processing of your personal data is:

Flow IT BV Registered office: Belgium Company number: BE 0478.751.164 Contact for privacy matters: legal@askeveai.com

3. What Personal Data We Collect

We collect personal data in the following ways when you interact with our Website:

3.1 Data Collected Automatically

When you visit the Website, certain technical data is processed automatically:

• IP address (processed by third-party services when loading external resources; see Section 6)
• Browser type and version
• Pages visited and time of access
• Referring URL

We use Plausible Analytics for website analytics, a privacy-focused analytics tool that does not use cookies and does not collect or store personal data. Plausible processes aggregated, non-identifiable data only and is fully GDPR-compliant. No consent is required for Plausible as it does not track individual visitors.

3.2 Data You Provide Voluntarily

Our Website features an integrated chat widget powered by Ask Eve AI. Through this chat widget, you may voluntarily provide us with personal data, including but not limited to:

• Your name
• Your email address
• Your telephone number
• Your company name or role
• Any other information you choose to share in the conversation

When you submit your contact details through the chat widget, you are required to provide explicit consent by ticking a consent checkbox. Without this consent, your contact details cannot be submitted. We may use the contact information you provide for sales and marketing communications, as described in Section 4.

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

5. Cookies and Similar Technologies

Our Website uses a minimal number of cookies:

5.1 Functional Session Cookie

The chat widget sets a session cookie that is strictly necessary for its technical operation. This cookie does not track you, is not used for marketing or analytics purposes, and expires when your browser session ends. Under GDPR and the ePrivacy Directive, strictly necessary cookies do not require consent.

5.2 No Tracking or Marketing Cookies

We do not use any tracking cookies, advertising cookies, or marketing cookies on the Website. Plausible Analytics operates entirely without cookies.

6. Third-Party Services and External Resources

The Website loads certain resources from third-party servers. When these resources are loaded, the third-party provider may receive your IP address and browser metadata as part of the HTTP request. The following third-party services are used:

No data is transferred outside of the EU.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this statement:

• Technical data (server logs): retained for a maximum of 90 days.
• Contact details submitted via the chat widget: retained for as long as necessary to manage the business relationship, or until you withdraw your consent or request deletion.
• Session cookies: deleted when the browser session ends.

8. Your Rights Under the GDPR

As a data subject, you have the following rights under the GDPR. You may exercise these rights at any time by contacting us at legal@askeveai.com:

• Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed and to request a copy of that data.
• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, subject to legal retention obligations.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing under certain circumstances.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object to processing based on legitimate interest at any time.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to your request without undue delay and in any event within one month of receipt, in accordance with Article 12 GDPR.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our infrastructure is hosted exclusively on European servers, including Scaleway (France) and Bunny.net (EU), to ensure data remains within the European Economic Area.

All data in transit is encrypted using TLS. Access to personal data is restricted to authorised personnel on a need-to-know basis.

10. International Data Transfers

We do not actively transfer personal data outside the EEA. However, the use of Google Fonts and Bootstrap Icons (loaded via CDN) may result in your IP address being transmitted to servers located outside the EEA, including in the United States. These transfers are safeguarded by Standard Contractual Clauses or adequacy decisions as applicable.

All core data processing for the Ask Eve AI platform takes place on European infrastructure, in line with our commitment to European digital sovereignty.

11. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected data from a child, please contact us at legal@askeveai.com and we will take steps to delete it promptly.

12. Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices, technology, or legal requirements. The most current version will always be available on the Website, with the date of the last update indicated at the top of the document.

We encourage you to review this statement periodically. Material changes will be communicated through a notice on the Website.

13. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Belgium is:

Gegevensbeschermingsautoriteit (GBA) Drukpersstraat 35, 1000 Brussels, Belgium Website: www.gegevensbeschermingsautoriteit.be Email: contact@apd-gba.be

14. Contact

If you have any questions about this Privacy Statement or wish to exercise your rights, please contact us:

Flow IT BV Email: legal@askeveai.com

© Flow IT BV. All rights reserved.