Privacy and cookies

1.1 What you give us

When you fill in a form inside a Stella answer, or write to us, we collect:

• Name
• Email address or phone number, depending on the route you chose
• When you would like to be contacted, if you tell us
• Company information we can read from your email domain (name, industry, size, website)
• The conversation you had with Stella, so the person who calls you knows what you asked

1.2 What you ask Stella

Every question typed into Stella is sent to our AI provider to produce the answer and is logged in our own system with the funnel stage and area it was about, its intent, how far into the conversation it came and the language of your browser. We do not log the answer. Please do not put personal or confidential details into a question.

1.3 What your visit tells us

Depending on the cookies you accept, we collect:

• Pages viewed, time on page, device, browser and approximate location (city level)
• Which campaign, ad or platform brought you here: the utm parameters and click identifiers from Google, Meta and LinkedIn in the link you arrived on, and the page that linked to us
• A random visitor id of our own, and the cookie identifiers set by Google, Meta and HubSpot, which let those tools recognise the same browser over time
• Your consent choices, so we can prove what you agreed to and when

We process the data to:

• Answer your question and, if you ask us to, get in touch with the right person at Stellar
• Learn which questions visitors ask, and where our knowledge falls short, so the answers get better
• Measure how visitors reach the site from Google, Meta, LinkedIn and other platforms, and what they do once here, so we can judge our own marketing
• Recognise, with your consent, when a visitor is an existing customer or lead in our CRM, and connect the visit and the questions asked to that contact, so that what we send and say to you is relevant to what you actually asked about
• Meet legal obligations, such as keeping a record of consent

We do not sell personal data, and we do not use it to make decisions about you by automated means alone.

Each purpose rests on one of these grounds under the GDPR:

• Consent, given through the cookie banner: statistics cookies (Google Analytics), marketing cookies (Meta pixel, HubSpot tracking) and matching your visit to our CRM. You can withdraw it at any time via Cookie settings below.
• Steps at your request before a contract: when you ask an expert to call or write to you
• Legitimate interest: answering your question, logging questions without any identifier, keeping the site secure and running
• Legal obligation: where the law requires us to keep records

We use cookies and similar identifiers in three groups. Necessary cookies keep the site and the cookie banner working and are always on. Statistics measure how the site is used and give you a random visitor id of ours (Google Analytics and our own). Marketing lets Meta, Google, LinkedIn and OpenAI measure our ads, lets HubSpot recognise your browser and, if you are already a contact of ours, lets us connect your visit to your record.

Nothing in the statistics or marketing groups is set before you say yes, and our servers send nothing to an ad platform before you do. Google's tag runs without cookies until then. Your answer is kept in our own consent log with the time and the version of this policy. The banner is shown again after twelve months, or earlier if what we ask changes, and you can change your answer at any time:

Cookie settings

We share personal data only with the providers that run these services for us, each bound by a data processing agreement:

• Anthropic (USA): produces Stella's answers from your question. Under its commercial terms the data is not used to train models.
• Vercel (USA, served from the EU): hosts the website.
• Google (Ireland/USA): Google Analytics and the Google tag, for statistics and campaign measurement.
• Meta (Ireland/USA): the Meta pixel in your browser and Meta's Conversions API from our server, for measuring and optimising our campaigns on Facebook and Instagram. Email and phone are sent hashed.
• LinkedIn (Ireland/USA): LinkedIn's Conversions API from our server, for measuring our campaigns on LinkedIn. Email is sent hashed.
• OpenAI (USA): the ChatGPT Ads Conversions API from our server, for measuring our campaigns in ChatGPT. Email is sent hashed.
• HubSpot (Ireland/USA, EU data centre): our CRM, where customers and leads are kept and where a visit can be joined to a contact.
• Vainu (Finland): company information looked up from your email domain.
• Hetzner (Germany): hosts Stella Studio, our internal system where leads and the question log live.

Beyond these, we disclose data only where the law requires it or in legal proceedings.

Some of the providers above process data in the United States. Where that happens we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses with supplementary measures.

• Leads and the attached conversation: 24 months after our last contact with you, longer only if you become a customer
• The question log: 24 months
• Statistics in Google Analytics: 14 months
• Marketing identifiers: as set by each tool, at most 24 months from your last visit
• Your consent record: 12 months in the cookie, after which the banner asks again; the log entry for as long as we must be able to show what was agreed to
• CRM records: for as long as we have a business relationship, and up to 24 months after

Under the GDPR you have the right to:

• Know what data we hold about you and get a copy
• Have inaccurate data corrected
• Have your data erased, under certain conditions
• Restrict how we process it
• Object to processing, including to any matching of your visit against our CRM
• Receive your data in a portable format
• Withdraw consent at any time, without it affecting what happened before
• Complain to the Swedish Authority for Privacy Protection (IMY), imy.se

To exercise a right, write to the address below. We answer within a month.

Data travels encrypted. Leads and the question log are kept in our own system, reachable only by named people at Stellar with a sales role, and every change of a lead's status is logged with who made it. Nothing you type is stored on the website itself.

The data controller for this website is:

We update this policy when what we do changes. The current version is always the one on this page, with the date it was last changed. Where a change means new cookies or a new purpose, the cookie banner asks again.