Privacy Policy

This policy describes how Demaai AB ("Dema.ai", "Dema" or "we/us") collects and handles personal data. It covers the use of cookies on the website dema.ai, as well as data we process through our product integrations — including the Google APIs, Meta APIs, and our Slack app. We are the data controller of the data collected through the use of cookies on our website and through these integrations, except where we process data on behalf of our customers as described in our Data Processing Addendum.

A cookie is a small text file sent by our web server and is stored on your computer. The cookie is used to provide you access to various functions as well as analyse your behaviour and your use of our website.

We use cookies to learn how you interact with our content and to improve your experience when visiting our website(s). We may employ the learnings of your behaviour on our website(s) to serve you with targeted advertisements on third-party website(s) in an effort to "re-market" our products and services to you.

Most web browsers are set to accept cookies by default. You do not have to accept the use of our cookies to visit our website. However, it may limit the functionality of our website if you do not allow certain cookies.

There are two different types of cookies, persistent cookie and session cookie.

Persistent cookies store a file on your computer for an extended period of time. However, the cookies have a time-limited duration. If the cookie's expiration date is exceeded, the cookies will self-delete or remain on your computer until you manually delete it but it will stop functioning.

Session cookies on the other hand are only temporarily stored on your computer and disappear as soon as you close your browser.

How do we use cookies?

Dema.ai collects and manages data via a variety of cookies, in some cases they may contain personal information. These cookies can be split into (i) necessary cookies; (ii) analytical cookies; and (iii) marketing cookies.

Necessary Cookies

Necessary cookies are those cookies that help with the basic functionality of our website. This includes for example cookies that speed up loading time, improve security and that record to what (other) cookies you have consented. We consider these cookies to be necessary for anyone to interact with our website and therefore you cannot disable these cookies.

Analytical Cookies

We use analytical cookies to gather statistics about the use and traffic on our website, so we can make it better. This may include, for example, a cookie from Youtube to track views of embedded videos and keep statistics of what videos the user has seen. It would also include the Google Analytics cookie, which is explained in more detail below.

Google Analytics

Google Analytics is Google's analytical tool helping us understand how our visitors use our website. The tool uses sets of cookies to collect information and generate statistical use information. If you do not want Google to collect your information via cookies, you can disable and block these cookies through Google Analytics Opt-Out.

Google API Data

What We Collect Through our integration with Google APIs (including Google Ads), we may collect data on behalf of our customers such as campaign performance metrics, ad spend, clicks, impressions, and conversion values.

Purpose of Collection This information is used solely to provide, improve, and optimize our services — for example, to generate ad-attribution analytics, profitability reports, and actionable insights for our customers.

Secure Storage & Limited Access All Google user data retrieved via Google APIs is stored securely in our databases with encryption and strict access controls. Only authorized team members with a legitimate business need may access this data.

No Unauthorized Disclosure or Sale We do not sell, rent, or share Google user data with third parties for their own marketing purposes. Data may be shared only with trusted service providers who support our platform's functionality, under confidentiality obligations and only as necessary to deliver our services.

Data Retention and Deletion We retain Google user data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When data is no longer needed, it is securely deleted or anonymized. Customers may request deletion of their Google user data at any time by contacting us at info@dema.ai.

Meta API Data (Facebook & Instagram)

What We Collect Through our integration with Meta APIs (including the Facebook Marketing API and Ads Insights API), we may collect data on behalf of our customers such as ad account metadata, campaign, ad set and ad configuration, creative and media metadata, product catalog identifiers, and ad performance metrics including spend, impressions, clicks, video views, and attributed conversion values.

Purpose of Collection This information is used solely to provide, improve, and optimize our services for the customer who connected the ad account — for example, to generate ad-attribution analytics, profitability reports, and actionable insights. We do not use Meta data to train or improve generalized models that benefit other customers, and we do not derive insights about end users of our customers' ads.

Secure Storage & Limited Access All Meta data retrieved via Meta APIs is stored securely in our databases with encryption in transit and at rest, and strict access controls. Only authorized team members with a legitimate business need may access this data.

No Unauthorized Disclosure or Sale We do not sell, rent, or share Meta data with third parties for their own marketing purposes. Data may be shared only with trusted service providers who support our platform's functionality, under confidentiality obligations and only as necessary to deliver our services.

Data Retention and Deletion We retain Meta data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When data is no longer needed, it is securely deleted or anonymized. Customers may request deletion of their Meta data at any time by contacting us at info@dema.ai. Disconnecting the Meta integration in our platform also triggers deletion of the associated Meta credentials.

Slack App Data

What We Collect When your workspace installs the Dema Slack app, we may access and process the following Slack data:

• Messages: Direct messages sent to the Dema bot, messages that mention @Dema in channels, and replies within existing Dema conversation threads are processed in order to generate responses. If you individually connect your Slack account to Dema, the Dema AI assistant may additionally — acting on your behalf and with your authorization — search and read message history in channels, group conversations, and direct messages you have access to, read canvases and files, and take actions in Slack on your behalf, such as sending messages, adding reactions, and creating or editing canvases, in order to answer your questions and carry out your requests.
• User profile information: Your Slack user ID and, when you link your Slack account to Dema, the email address associated with your Slack profile. When you link your Slack account, we also associate it with your Dema account profile — your name, email address, and role and permission information from your Dema account — so we can route and authorize your requests.
• Workspace information: Workspace (team) ID and name, channel IDs, conversation thread identifiers, and message permalinks.

Purpose of Collection This data is used solely to provide the Dema AI assistant inside Slack — to receive your questions, generate responses, and route conversations correctly. We do not use Slack data for advertising, and we do not use it to train generalized models that benefit other customers.

Secure Storage & Limited Access Our Slack app service stores only routing identifiers such as workspace, channel, and thread IDs and message permalinks. To generate responses, message content is sent to Dema's platform, where it is retained as part of your conversation history so the assistant can maintain context across a conversation. AI processing is performed by the service providers listed in our Data Processing Addendum, under confidentiality obligations. If you link your individual Slack account, your Slack authorization token is stored encrypted and used by Dema's platform — including via Slack's hosted access interface — solely to perform the actions you have authorized. Slack access tokens are encrypted at rest, and technical event logs (which contain no message content) are retained for approximately 30 days. Only authorized team members with a legitimate business need may access this data.

No Unauthorized Disclosure or Sale We do not sell, rent, or share Slack data with third parties for their own marketing purposes. Data may be shared only with trusted service providers who support our platform's functionality, under confidentiality obligations and only as necessary to deliver our services.

Data Retention and Deletion We retain Slack data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Uninstalling the Dema app from your workspace or revoking its tokens deletes stored user links and invalidates stored credentials. You can also disconnect your individual Slack account from Dema at any time, which deletes your stored Slack credentials, or request deletion by contacting us at info@dema.ai.

Marketing Cookies

We use marketing cookies to be able to show you relevant offers and ads across different websites. For example, this would include cookies from the major social media platforms such as Facebook, Twitter, LinkedIn, Youtube etc. Marketing cookies can further be split into two categories: those that enable onsite targeting and those that enable retargeting.

Onsite targeting and retargeting

We use cookies to optimise our offers directly on our website with so-called Onsite Targeting. Based on your behaviour on our website, we may tailor offers and highlight special information you might find useful. For example, we may show you personalised content on a particular page, depending on your previous behaviour. Cookies that we may use for this purpose can include, for example, Google Analytics, Facebook Pixel, Google Tag Manager, Google Ads Pixel, Twitter Advertising & Analytics, Albacross.

We also use cookies to optimise our offers and advertisements after you have visited our webpage, this is called retargeting. You may be retargeted on Google Ads, Twitter Ads, Facebook Ads, Albacross or any other marketing platform we use.

Albacross, Facebook Ads, Google Ads, Google Analytics are marketing tools which enable us to provide relevant services and offers to our customers. If you do not want these services to collect your information, you may block the cookies and disable them as set out below.

Third-Party cookies

A third party cookie is a cookie that is stored on your computer or mobile device on our behalf. These cookies may be persistent cookies or session cookies. Below are the third party providers that store cookies on our behalf. We may, from time to time, update these providers.

• LinkedIn — Privacy Policy
• Facebook — Privacy Policy
• Google — Privacy Policy
• Twitter — Cookie Policy
• Albacross — Privacy Policy

Log files

When you visit our site, the user data will be transferred from your browser and stored in log files, which will include (among other things) your IP address, URL and web browser.

We use this information for troubleshooting whenever a customer reports a bug on our webpage, for example. These log files are deleted one month after they were created.

Data Access Requests

You have the right to request access to the personal data we hold about you. Upon request, we will provide you with a copy of your personal data, along with information about how it is processed. You may also request that we correct any personal data that is inaccurate or incomplete.

To make a data access request, contact us at info@dema.ai. We may need to verify your identity before fulfilling the request, and we will respond within the timeframe required by applicable law (for example, within one month under the GDPR).

This right applies to all personal data covered by this Privacy Policy, including data collected through our website and through the Dema Slack app.

Data Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When the retention period for a given type of data expires, we will securely delete or anonymize it.

You may request deletion of your personal data at any time by contacting us at info@dema.ai. Upon verifying your identity, we will delete your data unless we are required to retain it for legal or operational reasons.