Privacy Policy

This is a courtesy translation. The binding text is the Italian one, available at airb4.com/privacy-policy. In case of any discrepancy, the Italian version prevails.

1. Data controller

The data controller is B4 S.r.l. unipersonale (S.r.l.), registered office at Via Roma Sud, 43, 42030 Vezzano sul Crostolo (RE), Italy, VAT IT03134390354, tax code 03134390354, owner of the AIR trademark.

For any request concerning personal data you can write to: info@airb4.com (certified email: b4srl.it@pec.it).

No Data Protection Officer has been appointed, as there is no obligation to do so under Article 37 GDPR.

2. Types of data processed

a) Data provided voluntarily by the user (contact forms)

• name, email address, the content of the message;
• any further information provided freely (for example number of products, target market, description of the need).

b) Browsing data

Collected automatically by the systems (for example IP address, browser and device type, pages visited, access times), processed for technical, statistical and security purposes.

c) Content entered into the demos

The site offers a number of public trials (generating a product page from a link, extracting data from a document, assistants that answer questions). Whatever is pasted or typed into these trials is sent to the language model provider for as long as it takes to produce the answer, and is not used to train models.

We keep for 90 days the text typed into the assistants and the links pasted into the demo, together with the time, the page it came from and a technical identifier. It serves one purpose: spotting attempts to manipulate the model's answers, and abusive use. That is how we keep a tool that is open to the public standing up. We do not profile anyone, we do not cross this data with the contact details left in the forms, and we do not use it for commercial purposes. The IP address is not recorded in the clear but turned into a fingerprint that cannot be traced back. Documents uploaded to the extraction demo are not retained: all that remains is the record that an upload happened, with the file type and size.

Legal basis: the controller's legitimate interest in the security and correct operation of the service (Art. 6.1.f GDPR). We still recommend not entering personal data or confidential information into the demos: they are not needed for the trials to work, and what you type stays in the log for the period stated.

d) Cookies and similar technologies

See the dedicated Cookie Policy.

3. Purposes and legal bases

4. How data is processed

Data is processed with IT and electronic tools, applying appropriate security measures. In line with the principles of minimisation and human oversight (HITL), collection is limited to the data necessary for the stated purposes.

5. Recipients and external processors

Data may be processed on the controller's behalf by suppliers acting as data processors (Art. 28 GDPR):

• Vercel Inc. · site hosting (USA);
• Google Ireland Limited / Google LLC · Google Fonts, Google Analytics 4, Google Workspace (the mailbox and the spreadsheet that form submissions arrive in) (EU/USA);
• Anthropic PBC · the language model behind the demos and assistants on the site (USA);
• Upstash Inc. · request counting, to limit abuse of the demos (EU/USA).

We do not use advertising or profiling tools: no Meta pixel, no Google Ads tag. Should that change, this page will be updated first. An up-to-date list of processors is available on request at info@airb4.com.

6. Transfers outside the EU

Some of the suppliers listed above may process data outside the European Economic Area, in particular in the USA. Such transfers take place on the basis of appropriate safeguards under Chapter V GDPR (Standard Contractual Clauses and/or adherence to the EU-U.S. Data Privacy Framework).

7. Retention period

• Form data and contact requests: for as long as is needed to handle the request and anything that follows commercially, and in any case no longer than 24 months from the last contact, subject to legal obligations.
• Log of content entered into the demos: 90 days, then deleted.
• Browsing data and cookies: as set out in the Cookie Policy.

8. Rights of the data subject

You may exercise at any time the rights under Articles 15-22 GDPR: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent (without affecting the lawfulness of processing carried out beforehand). Requests should be sent to info@airb4.com.

You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

9. Nature of the provision

Providing the mandatory data in the form (name, email) is necessary in order to act on the request; without it the request cannot be handled. The other fields are optional.

10. Changes

The controller reserves the right to amend this notice. The updated version will always be published on this page with its date.