Last updated: 2026-08-29
This Privacy Policy explains how EdgeLeap B.V. (“EdgeLeap”, “we”, “us”), registered in the Netherlands under KvK number 60431962, registered office at Hooghiemstraplein 15, 3514 AX Utrecht, The Netherlands, collects, uses, and protects personal data when you use the Internaut web application (app.internaut.ai and related account/product features, the “Service”).
Scope note: This policy covers the Internaut web application only — i.e. what happens once you have an account and are using the product. Our marketing website (internaut.ai) has its own Privacy Policy, which covers things like website analytics and contact forms before you sign up. If you’re an account holder, this policy applies to your use of the product; see that other policy for how we handle data on the marketing site itself.
We act as the data controller for the personal data described below.
Account data — name, email address, password (stored hashed, never in plain text), and any profile information you provide.
Billing data — we don’t store full payment card details ourselves; these are handled directly by our payment processor. We do retain billing-related records such as invoices, transaction history, and the subscription plan you’re on.
User content — the topics, instructions, and configurations you set up for your web monitors, and the content generated for your account as a result.
Usage and behavioral data — how you interact with the Service (pages visited, features used, session activity, device/browser type, approximate location derived from IP address), collected via our product analytics tool, so we can understand usage patterns and improve the product.
Support communications — emails and messages you send us, and transactional/product emails we send you.
Cookies and similar technologies — see Section 9.
The specific service providers involved in processing this data are listed in Section 3. We don’t intentionally collect any special categories of personal data (e.g. health, religion, political opinions) about you, and ask that you don’t submit such data as part of your monitoring configurations about yourself or others.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Creating and managing your account | Account data | Performance of a contract |
| Providing the Service (running your web monitors, generating results) | Account data, User content | Performance of a contract |
| Billing and subscription management | Billing data | Performance of a contract; legal obligation (accounting/tax) |
| Customer support, including troubleshooting on your behalf | Support communications, account data, user content | Performance of a contract; legitimate interest |
| Product analytics and improvement | Usage/behavioral data | Consent (via cookie banner) |
| Fraud prevention, abuse detection, enforcing fair use, security | Usage data, account data, audit logs | Legitimate interest; legal obligation |
| Marketing communications (only if you opt in) | Email address | Consent |
Where we rely on legitimate interest, we’ve weighed this against your rights and interests, and you can object at any time (see Section 8).
We share personal data with service providers (“sub-processors”) who process it on our behalf, each acting under a data processing agreement and only to the extent needed to provide the Service. We use providers in the following categories:
| Category | Purpose | Data involved | Typical location |
|---|---|---|---|
| Cloud hosting infrastructure | Running the application | All Service data | EU |
| Backup storage | Data backup and disaster recovery | All Service data (backups) | EU |
| Payment processing | Handling subscription payments | Billing data | EU/US, with safeguards |
| Transactional email delivery | Sending account and product emails | Email address, email content | EU/US, with safeguards |
| Product analytics | Understanding usage and improving the Service | Usage/behavioral data | EU |
| AI / inference compute | Powering AI features (relevance assessment, summarization, chat, and other AI-generated results) | User content and related context | EU/US, with safeguards |
| AI image generation | Generating certain visual content | AI-generated prompts only — these providers don’t receive your personal data or user content directly | Varies |
The specific companies we currently use in each category, and their locations, are listed in our sub-processor list, which forms part of our Data Processing Agreement (DPA) — see Section 6 below.
We don’t sell your personal data, and we don’t share it with third parties for their own marketing purposes.
We may also disclose data where required by law, to enforce our Terms, or to protect the rights, safety, or property of EdgeLeap, our users, or others — and in connection with a merger, acquisition, or sale of assets (subject to this policy continuing to apply).
Authorized EdgeLeap personnel may access your account data where necessary to provide customer support, investigate a suspected technical issue or abuse of the Service, or maintain security. In limited circumstances, this may include accessing the Service from your account’s perspective (“impersonation”) to view it as you would. Such access is restricted to authorized personnel, limited to what is necessary for the purpose, and recorded in an internal audit log.
Our core infrastructure (hosting and backups) is located in the EU. Some of the service providers described in Section 3 are based in, or transfer data to, countries outside the EU/EEA/UK, including the United States. Where personal data is transferred outside the EU/EEA/UK, we rely on appropriate safeguards recognized under GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs), or a provider’s certification under an approved transfer framework (e.g. the EU-U.S. Data Privacy Framework, where applicable). Details of these safeguards, per provider, are included in our DPA (see Section 6) and available on request.
If your organization requires a Data Processing Agreement for its own compliance purposes (for example under GDPR Article 28) — including our current named sub-processor list and the transfer safeguards that apply to each — we’re happy to provide one on request. Contact us at support@internaut.ai.
If you’re in the EEA, UK, or a jurisdiction with similar protections, you have the right to:
California and other US residents: depending on your state, you may have similar rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal data we collect, request deletion, correct inaccurate data, and opt out of the “sale” or “sharing” of personal data. We do not sell your personal data, and we don’t share it for cross-context behavioral advertising. To exercise any of these rights, contact us using the details below.
To exercise any of these rights, email us at support@internaut.ai. We may need to verify your identity before acting on a request.
The Service uses cookies and similar technologies that fall into two categories:
When you first use the Service, you’ll be shown a cookie banner where you can accept or reject analytics cookies. If you reject them, only strictly necessary cookies will be set, and no analytics data will be collected via cookies. You can change your choice at any time via https://app.internaut.ai/settings/preferences.
We take reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and hosting with providers that maintain their own security certifications. No system is 100% secure, but we monitor for and respond to security incidents, and will notify affected users and, where required, regulators, in the event of a data breach that poses a risk to your rights.
The Service isn’t directed at, or knowingly used by, individuals under 18. If we learn we’ve collected data from someone under 18, we’ll delete it.
We may update this Privacy Policy from time to time. If changes are material, we’ll notify you (e.g. by email or in-app notice) before they take effect.
For any privacy questions or to exercise your rights:
EdgeLeap B.V. Hooghiemstraplein 15, 3514 AX Utrecht, The Netherlands Email: support@internaut.ai KvK: 60431962