Who controls the data

Digitalime UG is responsible for the personal information collected through the Aiko website and the Early Access application flow.

Digitalime UG
Hadlichstr. 26
13187 Berlin
Germany

Contact: [email protected]. For application questions, use [email protected].

Information we collect

• Application details: name, email, company, role, design-system environment, AI maturity and challenge description.
• Operational metadata: hashed IP address, user agent and referrer.
• Communication records if you email us or we reply to your application.
• Basic server logs created by our infrastructure providers when the site or API is accessed.
• Website usage data via PostHog: pages viewed, general device/browser information, and session recordings with every typed input value masked. Disabled entirely if your browser sends a Do Not Track signal.

How we use the information

• Review Early Access applications and decide whether Aiko can genuinely help.
• Send confirmation and follow-up emails about the application or alpha.
• Protect the website and API from spam, abuse and operational failures.
• Improve Aiko’s product direction using aggregated, non-public application themes.

Legal basis

Where GDPR or similar laws apply, we rely on your request to take steps before entering into a possible alpha relationship, our legitimate interest in operating and protecting the website, and consent where a separate consent mechanism is presented.

Service providers

We use specialist providers to operate the website and application flow:

• Cloudflare for hosting, Worker execution, routing, security and technical logs.
• Supabase for storing Early Access applications.
• Resend for sending confirmation and internal notification emails.
• PostHog (EU-hosted) for website product analytics.
• Font and icon providers for loading selected public website assets.

These providers may process data in the United States, European Union or other regions where they operate infrastructure.

Retention

We keep Early Access applications while reviewing alpha participation and for a reasonable period afterwards to manage follow-up, prevent duplicate applications and understand demand. If an application is not relevant, we aim to delete or anonymise it within 18 months.

Security and operational logs are retained according to the default retention periods of our infrastructure providers unless a longer period is needed to investigate abuse or errors.

Cookies and tracking

This website uses PostHog, an EU-hosted product analytics provider, to understand how visitors use the site and to identify usability issues. PostHog only loads after you accept the cookie banner shown on your first visit — rejecting is exactly as easy as accepting, and nothing is set until you choose. PostHog sets cookies and uses browser storage to distinguish visitors and, once you apply for Early Access or otherwise identify yourself, to associate that activity with your application. Session recordings mask the value of every input field by default, so nothing you type (name, email, etc.) is ever captured. We do not use advertising cookies or third-party advertising pixels. If your browser sends a Do Not Track signal, you are never asked and analytics never loads. Some infrastructure providers may separately use strictly necessary technical data to deliver the site and protect the service.

Manage cookie preferences

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, or to receive a portable copy. You may also have the right to complain to your local data protection authority.

To make a request, email [email protected].

Changes

We may update this notice as the website, alpha programme and company structure evolve. Material changes will be reflected by updating the date on this page.