Privacy Policy
Last updated: 1 May 2026
1. Who We Are
FiskerAI is operated by Except Integrated Sustainability BV (“Except BV”, “we”, “us”), 2e Daalsedijk 6A, 3551 EJ Utrecht, The Netherlands. Except BV is the data controller under the General Data Protection Regulation (GDPR / AVG).
Contact: privacy@except.eco
2. Data We Collect
Account data
When you create an account, we collect your email address, name, and authentication provider details.
Lawful basis: performance of a contract (Art. 6(1)(b) GDPR).
Billing data
If you subscribe, we store a Stripe customer ID and subscription status linked to your account. We never store card details on our servers — all payment data is held by Stripe.
Lawful basis: performance of a contract (Art. 6(1)(b) GDPR).
Query logs
We log queries you submit to the AI assistant (a short preview of the question text, timestamp, model used, and sources retrieved) to improve the service and monitor for abuse.
Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) — service improvement and abuse prevention.
3. Third-Party Processors
Stripe, Inc. (United States)
Payment processing. Transfer mechanism: EU Standard Contractual Clauses (SCCs). See stripe.com/privacy.
Anthropic, PBC (United States)
Queries you submit are sent to the Anthropic API for AI processing. Transfer mechanism: EU Standard Contractual Clauses (SCCs). See anthropic.com/privacy.
We do not sell your data. We do not use third-party analytics or advertising trackers.
4. Cookies
We use session cookies solely to keep you logged in. These are strictly necessary cookies and are exempt from consent requirements under Dutch Telecommunicatiewet Art. 11.7a. We do not use tracking, advertising, or third-party analytics cookies.
5. Data Retention
Account data: retained while your account is active. Deleted upon request or account closure.
Query logs: anonymized after 90 days; fully deleted after 12 months.
Billing records: retained per Stripe's data retention policy and Dutch tax obligations (7 years for financial records).
6. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Data portability (receive your data in machine-readable format)
- Object to processing based on legitimate interest
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, email privacy@except.eco. We will respond within 30 days.
7. Changes
We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.