Privacy Policy
Substantive updates to this policy will be marked clearly on this page. If you spot anything unclear or missing, email contact@attera.io.
i.Who we are
Attera is operated by the Attera team based in Leuven, Belgium ("we", "us", "our"). For questions about this policy or to exercise your rights under the GDPR, email contact@attera.io.
ii.Data we collect
From visitors to attera.io
- Pages visited, referring URL, anonymised browser/device type, used only to understand what's working on the site.
- Information you submit through forms when you book a demo or apply to the design partner program (name, email, company, role).
From product users
- Account information: name, work email, company.
- Documents you upload, the data extracted from them, and the reports generated.
- Audit logs: who did what, when. Required for compliance traceability.
iii.How we use it
- To run the product you asked us to run.
- To improve Attera's accuracy and reliability, only on aggregated, de-identified telemetry. We do not train AI models on your documents.
- To contact you about your account, scheduled calls, and material product changes.
iv.Where your data lives
Documents are processed and stored exclusively on infrastructure located in the European Union (Belgium and Hetzner data centres in Germany / Finland). Data is never replicated outside the EU. The AI runs on hardware we physically own in Leuven. Your documents are never sent to OpenAI, Anthropic, Google, or any third-party LLM provider. Sub-processors are listed on the security page.
v.How long we keep it
| Data type | Retention |
|---|---|
| Marketing form submissions | 24 months, then deleted |
| Product account data | For the life of the account, plus 30 days |
| Uploaded documents & generated reports | Customer-controlled. Delete anytime; 30-day deletion grace period. Encrypted snapshots, EU-only; retention documented in your subscription agreement. |
| Audit logs | 7 years (regulatory) |
vi.Your rights
Under the GDPR you have the right to access, correct, export, delete, and restrict processing of your personal data. Email contact@attera.io with the subject line "GDPR request" and we'll respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority.
vii.Cookies
We use a small number of strictly-necessary cookies. See our cookie policy for the full list. The Google Calendar booking iframe is loaded only after you click. It does not auto-load.
viii.Changes
We will post substantive changes to this policy on this page with an updated "Last updated" date and, for product users, send an email notification.