Privacy statement

Last updated: 22 September 2026

This statement describes what Aimable BV does with personal data on this website. Aimable BV, Jacob Bontiusplaats 9, 1018 LL Amsterdam, the Netherlands, is the controller for that data.

This statement is about the website only. The data our customers put into the Aimable Platform falls under the agreement we sign with them. How the platform protects that data, and who its subprocessors are, is set out in our trust center.

When you fill in a form. The contact form asks for your name, organisation, email address and question, and you can add a phone number. An open application asks for your name, email address, a link to your work or profile, the role you are interested in, and your motivation. Registering for a webinar asks for your first name and email address, and optionally your last name and organisation.

When you visit, and only if you accept analytics cookies. Which pages you look at, how you arrived, and roughly where you are. Once you fill in a form, the visits from that browser are linked to your name and email address, including the ones before you filled it in.

When you arrive through a personal link. Some of the links in our emails, and in the Aimable Workbench, carry a signed token that says who is clicking. We use it to count the click against the right person. If you have not accepted analytics cookies, the token expires unused and the click stays anonymous.

When you try one of the demos. Whatever you type into the demo on our website. What happens to it is described in section 3.

If we ever want to use your data for something else, we ask you first.

The redaction demo shows what our software does with personal data before any AI sees it, so it is worth being precise about where your words go.

What you type goes first to our own demo environment, which finds the personal data in it and returns your text with names, addresses and numbers replaced by placeholders. Only that redacted version is then sent on to the AI that writes the answer, which is Anthropic's Claude, running in the United States. The list that maps each placeholder back to the real value never leaves your browser, so it is never sent anywhere.

That is the point the demo is making: the AI answers without ever receiving the personal data. Even so, the text you type does reach us in full, so please do not paste anything you would not want to share with us. Nothing you type is used to train any AI.

We use other companies to run parts of this website. They only get what their part needs.

• PostHog, our website analytics and the record of what forms were submitted. Hosted in the EU
• Zoom, webinar registration and the emails about it. Our account is set to store this data in the EU
• Slack, where a notification of your message reaches the person who will answer it. United States
• Render, the hosting of this website. United States
• Cloudflare, which sits in front of this website to serve it quickly and keep it available. Every request, and so every visitor's IP address, passes through it. United States
• Substack, our newsletter, and only for people who asked for it. United States
• Calendly, booking a call with us. United States
• Anthropic, the AI in the demo described above, and only ever the redacted text. United States

If you accept analytics or marketing cookies, these also receive data about your visit: Google Analytics, LinkedIn, Leadfeeder and lemlist for analytics, and Vimeo, YouTube, Spotify and Google Maps when you choose to play a video or a podcast or to look at the map. Our cookie policy lists what each of them sets.

We do not sell your data and we do not pass it to anyone else for their own marketing.

Apart from that, we only hand over personal data when the law requires it, or when a court or a supervisory authority orders it. If Aimable is acquired or merges with another company, the data we hold is one of the things that transfers, and we will say so here before it happens.

Several of the companies above are based in the United States: Slack, Substack, Calendly, Render and Cloudflare, and, once you allow the cookies that load them, Google, LinkedIn and Vimeo. Each is an active participant in the EU-US Data Privacy Framework, and that is what your data travelling to them rests on.

Anthropic, the AI in the demo, is not a participant in that framework. That transfer rests instead on the standard contractual clauses approved by the European Commission. Only the redacted text ever reaches it, as described in section 3.

Some of what we use does not leave Europe at all. PostHog stores our data in the EU and our Zoom account is set to do the same, and Leadfeeder, lemlist and Spotify are European companies.

If you want to know what applies to a particular service, write to privacy@aimable.ai and we will tell you.

• Messages and webinar registrations: two years after we last spoke.
• Open applications: four weeks after we close the vacancy, or a year if you give us permission to keep you in mind.
• Analytics: twelve months.
• Newsletter: until you unsubscribe.
• The demos: what you type is not stored after the answer is written. The conversation is deleted as soon as you close it.

We keep some things longer when the law tells us to, for example invoices for our tax records.

You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to limit what we do with it, object to us using it, or ask us to send it on to someone else. Where we rely on your consent, you can withdraw it at any time, and that does not affect what we did before you withdrew it.

Write to privacy@aimable.ai and we will answer within a month.

If you are not happy with our answer, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens in The Hague, or to the authority in the country you live in.

This website sets cookies that are needed to make it work, and, if you allow them, cookies for analytics and marketing. You can change your choice whenever you like. Our cookie policy lists every one of them and what it does.

We take reasonable measures to protect the data on this website against loss and against people who should not see it. No website can promise complete security, and we will not pretend otherwise. If something does go wrong and it puts your data at risk, we will tell you and the supervisory authority as the law requires.

This website links to other places, and those sites have their own privacy statements. We have no control over what they do, so it is worth reading theirs when you get there.

When this statement changes we update the date at the top. If a change matters to you, for example because we start using your data for something new, we will tell you rather than leave you to spot it.