Privacy notice
Last updated: 2 June 2026
Summary
ICOSE P.C. ("ICOSE", "we") runs icose.ai. This notice explains what personal data we collect when you use the site, why we use it, who we share it with, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019. If you only want the short version: cookies that are strictly necessary to run the site are always on; analytics and marketing cookies are off until you opt in; chats stay on your device until you choose to send us your details, at which point the conversation is emailed to our team so a person can follow up.
Who we are
ICOSE P.C., a private company registered in Greece, is the data controller. Registered office: 35-37 Karaoli Street, Nea Ionia, Athens, Greece.
- General Commercial Registry (GEMI) Number: 182605603000
- Registered VAT Number: EL802778837
- European Unique Identifier (EUID): ELGEMI.182605603000
- Chamber of Commerce Registration Number: 445317
Contact: privacy@icose.ai or contact@icose.ai.
What we collect
Chat with our AI guide
Your messages are sent to our AI provider, Anthropic, in real time so the assistant can generate its replies. This happens as you chat, on the legal basis of our legitimate interest in running the AI guide you are using. Anthropic processes the messages as our processor and does not use them to train its models. See "Who we share data with" below for where Anthropic is based and how the transfer is protected.
Your messages and the AI's replies are also stored locally in your browser (in localStorage) so the conversation is still there if you refresh the page. The chat is not sent to the ICOSE team unless you ask for a call, send an enquiry, or otherwise submit the contact form. When you submit the form, the whole transcript is emailed to the ICOSE team so a person can pick up where the AI left off, and a copy of the same transcript and your details is also emailed back to you at the work email you provide.
Enquiry / contact form
When you book a call or ask us to follow up, we collect your first name, last name, company, position, work email, and the message you write to us. The full chat transcript is sent alongside these details, to both the ICOSE team and to you.
Technical data
We receive basic technical information your browser sends with each request: your IP address, user agent string, referring URL, and broad geographic region. This is processed by our hosting and edge providers to deliver the site and to detect abuse.
Cookies and similar technologies
See "Cookies and tracking" below. We do not set any non-essential cookies until you have given consent.
Why we use your data, and on what legal basis
- To run the site and respond to your enquiry. Legitimate interests (GDPR Art. 6(1)(f)) and, where you submit an enquiry, taking steps at your request before entering into a contract (Art. 6(1)(b)).
- To send marketing emails about ICOSE's services to business contacts. Legitimate interests, with a clear unsubscribe link in every message. We do not send marketing emails to consumers without consent.
- To measure how the site is used and to measure advertising via Google Analytics, Vercel Web Analytics, and Google Ads, including the campaign (UTM) parameters in the link you arrived through. Consent (Art. 6(1)(a)). These run only if you have opted in via the cookie banner.
- To comply with our legal obligations (for example, tax and accounting records). Legal obligation (Art. 6(1)(c)).
Who we share data with (sub-processors)
We share data with the providers below only as far as needed to deliver the service.
| Provider | Purpose | Location |
|---|---|---|
| Anthropic, PBC | Powers the AI guide. Messages you send to the chat are forwarded to Anthropic's API to generate replies. Anthropic does not use API inputs or outputs to train its models. | United States |
| Google LLC | Google Analytics 4 (site usage measurement) and Google Ads (advertising measurement and remarketing). Loaded only with your consent. | United States / EU |
| Resend (Resend, Inc.) | Sends the transactional emails the contact form generates: your enquiry and chat transcript to the ICOSE team, and the confirmation copy back to you. | United States |
| Vercel Inc. | Hosts the website and processes incoming requests at the edge. Also provides Vercel Web Analytics (cookieless site-usage measurement, including campaign / UTM parameters), loaded only with your consent. | United States / EU |
Each provider acts as a processor under our instructions and only for the purposes set out above. We do not sell personal data.
International transfers
Some of the providers above are based in, or transfer data to, the United States. Where this is the case, the transfer is covered by the European Commission's Standard Contractual Clauses, or by the Data Privacy Framework agreed between the EU and the US where the provider is self-certified. You can ask us for a copy of the safeguards that apply to a given transfer.
How long we keep data
- Chat transcripts on your device. Kept until you clear them. They stay in your browser and never leave your device unless you submit the contact form.
- Submitted enquiries and transcripts emailed to us. Up to 24 months from last contact, then deleted unless we have an active client relationship.
- Analytics data. Google Analytics is configured with a retention window of 14 months. Vercel Web Analytics stores aggregated, non-identifying usage data.
- Email marketing records. Kept until you unsubscribe, plus a short suppression-list record so we do not contact you again.
- Accounting records. Kept for the period required by Greek tax and accounting law, generally at least five years from the end of the relevant financial year.
Cookies and tracking
We use three categories of cookies and similar storage. You can change your choice at any time. Use the "Cookie settings" link in the footer or the button below.
Strictly necessary
Always onRequired to run the site, keep your chat on your device, and secure form submissions. These cannot be turned off.
Analytics
Off until you opt inGoogle Analytics 4 and Vercel Web Analytics. Help us understand which pages and questions are useful, and which campaigns bring people here (via the UTM parameters in the link you arrived through), so we can improve the site. Google Analytics truncates IP addresses; Vercel Web Analytics is cookieless.
Marketing
Off until you opt inGoogle Ads conversion tracking and remarketing. Used to measure whether our advertising reaches the right audiences.
Your rights
Under the GDPR you have the right to:
- Ask for a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Ask us to delete data (subject to legal retention rules).
- Object to or restrict processing based on legitimate interests or for direct marketing.
- Receive data in a portable format.
- Withdraw any consent you have given, at any time.
To exercise any of these rights email privacy@icose.ai. We aim to respond within 30 days.
If you are unhappy with how we have handled your data you can complain to the Hellenic Data Protection Authority at dpa.gr. You may also lodge a complaint with the supervisory authority in the EU country where you live or work.
Changes to this notice
If we materially change how we use personal data we will update this page and, where appropriate, let you know directly.