Privacy policy
This policy explains how we handle personal data when you visit www.merkys.ai or contact us about Merkys. The short version: this website sets no cookies and runs no advertising trackers. We measure how the site is used with cookieless analytics, and otherwise only process personal data you choose to send us, plus the technical logs any web server keeps.
Who we are
Merkys is a product of AAI Labs. The data controller for this website is UAB Taikomasis dirbtinis intelektas, company code 304845429, registered in the Republic of Lithuania ("AAI Labs", "we", "us").
For any privacy question or request, email hello@aai-labs.com.
This policy covers the Merkys website only. When an organisation deploys Merkys, that organisation decides what data the software processes and acts as the controller; our role and obligations are set out in our contract with them. If you use Merkys at work, contact your organisation about how it handles your data.
What we collect and why
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| What you send us by email: name, email address, company, role, phone number if given, and the content of your message | Replying to your enquiry, arranging and running a demo, and preparing an offer if you ask for one | Art. 6(1)(b), steps taken at your request before a contract; Art. 6(1)(f), our legitimate interest in answering enquiries | 3 years from our last exchange, unless the conversation leads to a contract |
| Server logs: IP address, date and time, requested page, browser and device type (user agent), referring page | Delivering the website, keeping it secure, and investigating errors and abuse | Art. 6(1)(f), our legitimate interest in operating a secure website | Only as long as needed for security and troubleshooting, after which our hosting provider deletes them automatically |
| Usage analytics: pages viewed, clicks (including clicks on “Book a demo”), scrolling and mouse movement on the page, referring website, browser and device type, and approximate location derived from your IP address | Understanding which pages are useful, where visitors get stuck, and improving the website | Art. 6(1)(f), our legitimate interest in understanding how our website is used | As long as needed to analyse website use, within the retention period of our analytics service |
If an enquiry leads to a contract, we keep the related correspondence for as long as Lithuanian law requires us to keep contract and accounting records.
We do not use your data for automated decision-making or profiling, and we do not sell it.
Cookies and similar technologies
This website does not set cookies and does not store anything in your browser’s local storage. It uses no tracking pixels, advertising tags or cross-site tracking, and fonts and icons are served from our own domain.
We use two cookieless analytics tools:
- Cloudflare Web Analytics, provided by our hosting provider, counts page views and visits without identifying individual visitors.
- PostHog records page views, clicks and, for some visits, a replay of how the page was scrolled and clicked. It is set to keep its identifiers in memory only, so nothing is stored on your device and nothing links your visit to later ones. The site has no forms, so replays contain no text you type.
That’s why there is no cookie banner. If we add tools that need your consent in the future, we will update this policy and ask for your consent first.
Who receives your data
We share personal data only as needed for the purposes above:
- Service providers who process data on our behalf under a data processing agreement, such as our website hosting and email providers. They may only use the data to provide their service to us.
- Analytics providers: Cloudflare, which hosts the website and provides Cloudflare Web Analytics, and PostHog, whose EU cloud stores our analytics data. PostHog requests are sent through an AAI Labs domain (p.agentbarn.dev).
- Authorities, courts, auditors and legal advisers, where the law requires it or where it is needed to establish, exercise or defend legal claims.
Where a provider processes data outside the European Economic Area, we make sure an adequate safeguard is in place under Articles 44–49 of the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses.
Your rights
Under the GDPR you have the right to:
- be informed about how your personal data is processed, and access it;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten");
- restrict processing of your data;
- object to processing based on our legitimate interests;
- receive your data in a portable format;
- not be subject to a decision based solely on automated processing.
To exercise any of these rights, email hello@aai-labs.com. We may ask you to confirm your identity before acting on a request. We will reply within one month. For complex or numerous requests we may extend this by up to two more months, and we will tell you if we do.
If you think we have handled your data unlawfully, you can complain to the Lithuanian supervisory authority, the State Data Protection Inspectorate (vdai.lrv.lt), to the data protection authority where you live or work, or to a court. We'd appreciate the chance to resolve your concern first.
Security
The website is served over HTTPS only. We limit access to enquiry emails to the people who need them to respond, and we use technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
Changes to this policy
We may update this policy when the website or the law changes. The date at the top shows when it last changed. Significant changes will be highlighted on this page.
For how AAI Labs handles personal data outside this website, see the AAI Labs privacy policy.