Privacy Policy

Version 1.0 – Last updated: 2025-11-27

This Privacy Policy explains how Droidtech 42 AI Labs AB ("Droidtech", "we", "us", "our") processes personal data when you visit our website or purchase and use our software product Agentic Embedded Debugger.

1. Data Controller

The data controller is:

Droidtech 42 AI Labs AB
Organisation number: 559534-0745
VAT number: SE559534074501
Address: Co. Sandberg, Dannemoragatan 4, 4 tr, 113 44 Stockholm, Sweden
Website: https://www.droidtech.ai
Email: info@droidtech.ai
Phone: +46 (0)76 229 81255

Data protection contact person: Lee Sandberg
Email: support@droidtech.ai

2. What Personal Data We Collect

2.1 When you purchase a license

When you buy the Agentic Embedded Debugger through our website (payments handled by Stripe), we collect:

Name
Email address
Billing address
Company name and VAT number (if provided)
Purchase details (product, price, date, currency)
License key assigned to you

Payment card details are processed directly by Stripe; we do not see or store full card details.

2.2 When we generate and send your license

Our licensing system, hosted on Hetzner servers in Germany, processes:

Your email address
Your license key
Purchase and activation timestamps
Technical logs necessary for troubleshooting delivery

We use Resend to send your license key to your email address. Resend processes email address and delivery metadata.

2.3 When you contact our support

When you contact us at support@droidtech.ai, we process:

Your email address and name (if provided)
Content of your message and attachments
Technical information you choose to share (e.g. logs, screenshots)

2.4 Website visits and cookies

Our web hosting and security providers may collect standard server logs (IP address, browser type, date and time, etc.). If we use analytics or other non-essential cookies, we will ask for your consent via a cookie banner. For details, see our Cookie Policy.

3. What We Do Not Collect

Agentic Embedded Debugger is a client-side / customer-controlled tool. It connects to your own AI services and infrastructure. We do not:

Collect or store prompts, outputs or other AI-related content processed through your systems
Access your internal code, datasets or business-specific data through the product
Use customer data from the product to train any models

The MCP software does not send customer content to Droidtech's servers. Our role is limited to licensing, updates, and support.

Optional Data Sharing: You may, at your sole discretion, choose to opt in to share additional data with us for purposes such as product improvement, troubleshooting, or feature development. Any such data sharing would be subject to your explicit prior consent, and you may withdraw such consent at any time. Where you provide consent to share data, we will process it in accordance with the purposes specified at the time of collection and the legal basis of consent under GDPR Article 6(1)(a).

4. Purposes and Legal Bases of Processing

We process personal data only when we have a legal basis under the GDPR.

Purchase and license management
To process your order, generate and manage your license, and provide you with the software.
Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
Customer support
To respond to your questions and assist with technical issues.
Legal basis: legitimate interest (Art. 6(1)(f)).
Accounting and tax
To comply with Swedish accounting and tax laws.
Legal basis: legal obligation (Art. 6(1)(c)).
Security and fraud prevention
To protect our systems, detect abuse of licenses, and prevent fraud.
Legal basis: legitimate interest (Art. 6(1)(f)).
Optional communication / updates (if we send product update newsletters and you opt in)
Legal basis: consent (Art. 6(1)(a)) or legitimate interest where permitted.

5. Data Storage, Location and Security

5.1 Locations and providers

Hetzner (Germany) – hosting of our licensing server and related logs
Stripe – payment processing
Resend – email delivery of license keys and transactional messages
Google Workspace – email and internal documentation
GoDaddy – domain and web hosting infrastructure

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and security monitoring.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described above or as required by law.

Billing and accounting data: kept for 7 years in accordance with Swedish accounting rules.
License and activation data: kept for the duration of the license plus 3 years for audit and support.
Support communications: kept for up to 24 months after the last contact, unless longer retention is needed for a dispute.
Web server logs: kept for a limited period (typically up to 12 months) for security and troubleshooting.
Cookies and analytics data: retained as described in the Cookie Policy and/or by the provider's default settings.

7. Sharing of Personal Data

We do not sell your personal data. We share data only when necessary and only with:

Payment provider (Stripe) to process your purchase
Infrastructure providers (Hetzner, GoDaddy) to host services
Email providers (Resend, Google Workspace) to send communications
Professional advisors (e.g. accountants) where legally required
Authorities or courts when required by law

8. International Data Transfers

We aim to keep data within the EU/EEA. Where data is transferred outside the EU/EEA by our processors, such transfers are protected by appropriate safeguards (such as Standard Contractual Clauses) and additional measures where required.

9. Your Rights Under GDPR

You have the following rights, subject to legal limitations:

Right of access – to know what data we process about you.
Right to rectification – to correct inaccurate data.
Right to erasure – to request deletion of your data, where applicable.
Right to restriction of processing.
Right to data portability, where technically feasible.
Right to object to processing based on legitimate interest.
Right to withdraw consent at any time, where processing is based on consent.

To exercise your rights, contact us at support@droidtech.ai. We may need to verify your identity before acting on your request.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority in the EU/EEA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. Material changes will be communicated where appropriate.

11. Contact

For questions about this Privacy Policy or our data protection practices, please contact:

Droidtech 42 AI Labs AB
Co. Sandberg, Dannemoragatan 4, 4 tr
113 44 Stockholm, Sweden
Email: info@droidtech.ai
Support: support@droidtech.ai
Phone: +46 (0)76 229 81255