Privacy & terms

Who we are

These sites are run by NOETIKON LTD, a private limited company registered in England and Wales under company number 16583577, with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We work from our office at Apollonos 3, Syntagma, 105 57 Athens. For anything on this page, write to us at •••••@•••••••.

This notice covers noetikon.gr and our three demo sites: haven.noetikon.gr, an estate agency, lucid.noetikon.gr, a cocktail bar, and pulse.noetikon.gr, a conservation charity. The businesses are invented, but their assistants are real AI assistants that we built to show our work. On all four sites we are the controller of your information, which means we are responsible for it under data protection law. This notice also covers visitor analytics and the six-month cookie that remembers your analytics choice on our Echelon demo at echelon-demo-rdgtr.noetikon.gr; that site does not run an assistant or browser Sentry. Nea Poli, our demo of a municipal website at nea-poli-demo.noetikon.gr, has its own notice on that site.

We also run AI assistants for other businesses. When you talk to one of them on a client's website, that business is responsible for your information and this notice doesn't apply, so please ask the business.

Talking to our assistants

Nex, on our contact page, and the assistants on the demo sites, Iris at Haven, Nico at Lucid and Pulse at Pulse, are AI assistants. When you talk to them you are not talking to a person: an AI model writes every reply. Like any system of this kind they can get things wrong, and what they say is not a promise from us or professional advice.

When you send a message, we pass it, together with the recent conversation, to our AI model provider in the United States, which writes the reply. The provider does not use what you write to train its models, and keeps it for up to 30 days to check for misuse, unless the law requires longer. We do this because it is our legitimate interest to answer your questions and, on the demo sites, to show how our assistants work.

We also keep our own record of each conversation: every message and reply, the IP address it came from, and any details you give in the chat to book a call or a viewing or to leave us a message, such as your name, email and phone number. Only we read it, to check that the assistants answer correctly, to put their mistakes right and to spot misuse, which is our legitimate interest, and we delete it after 30 days.

On Haven, Lucid and Pulse the conversation is also saved in your browser, so that it isn't lost if you reload the page, and on Haven this includes any viewing you book. It is removed when you start a new chat, and otherwise the next time you open the site more than 24 hours after your last message. This doesn't remove our record. Nex doesn't save your conversation in your browser.

The assistants never need sensitive information, so please don't tell them about your health, money, religion or politics, and don't type passwords, card numbers or other people's details.

Voice

You can also speak to our assistants instead of typing. The microphone records only after you press its button, and the recording goes to our speech-recognition provider in the United States, which turns it into text. From then on the text is handled like a typed message, and only the text goes into our 30-day record. We use your voice only to understand what you said, never to recognise who you are. We don't save recordings ourselves. Live transcription uses ElevenLabs with its standard provider retention; we cannot promise immediate deletion of live audio or transcripts. When a recording is uploaded after you stop speaking instead, we request deletion of that recording and its transcript as soon as transcription finishes.

Spoken replies stay off until you switch them on. When they are on, we send the text of each reply to our speech provider in the United States, which reads it aloud in a voice generated by AI; no person is speaking. The audio isn't saved, in your browser or by us, and the provider keeps the text only to provide its service to us and deletes it after our contract with it ends.

Both providers work only on our instructions and don't use your recordings or our replies to train their models. We use them for the same legitimate interest as the written chat.

Booking a call, leaving a message, joining the waitlist

On our contact page, Nex can book you a call with us or pass us a message. For either, we ask for your name and email, and then a time that suits you or what you want to tell us, and you can add a phone number and, for a call, a note. You don't have to give us any of this, but without your name and email we can't book the call or reply to you. Before we save a call or a message, your name and what you wrote go to our AI model provider for a quick check. We then keep the details in our database, email you a confirmation and send the details to our own inbox, through our email provider in the EU. We use them to hold the call or answer you, because you asked us to, and keep them for 24 months from when we receive them, so that we know the background if you get in touch again, which is our legitimate interest. We then delete them, along with the copies in our inbox. An email you send us directly is kept and deleted in the same way.

If you join the waitlist for our training, we keep only your email address. We send you a confirmation, and after that use it only to tell you when a course opens. We do this with your consent, which you can withdraw at any time by writing to •••••@•••••••; we then take you off the list straight away, and otherwise delete your address after 24 months.

The estate agency on Haven is invented, so a viewing you book with Iris is never passed on and nobody will contact you about it. The name, email and phone number you give her stay only in the conversation, in your browser and in our 30-day record, and you're welcome to make them up.

The bar on Lucid is invented too, so nothing you order there is made or charged. An order holds only the drinks, a table number and whether you chose card or cash, nothing that identifies you, and it is deleted 24 hours after it is placed.

What our servers record

Like almost every website, ours keep a log of the requests your browser makes to them: your IP address, the time, the address of the page or file asked for, the page you came from, and your browser and device type. The server behind our assistants also logs each request with your IP address, and notes the email address on each email it sends and each waitlist sign-up. It also counts the messages sent from each IP address, in memory and for an hour at most, so that no one can flood the assistants. We use these records to keep the sites running and secure and to stop misuse, which is our legitimate interest, and delete them after 90 days at the latest.

If something breaks on our servers, an error report goes to Sentry, the service described below, without your IP address or anything you wrote.

Cookies and browser storage

Our sites keep a few small items in your browser, as cookies or in its local and session storage. Most of them are essential: they remember a choice you made, such as your language, or keep a conversation or an order in place while you use it. The law lets us use these without asking, because each one only does something you asked for, and none of them is used to follow you or passed to anyone else.

With your consent, we use Umami on our own server to count visits, pages viewed, referring websites, approximate countries and device types, and actions such as completing a contact request. Umami uses no analytics cookies. It derives a temporary identifier from your IP address and browser information; we do not send names, messages, form contents, URL query strings or fragments. We keep traffic data for 60 days, removed by our daily maintenance, with older copies remaining in our seven daily backups. Umami session replay and user identification are disabled.

Sentry tells us when something breaks on one of our pages. When an error happens, it receives a report of what failed, on which page and in which browser and device, together with a recording of the page from the minute before the error until the end of your visit, in which all text, everything you type and all images are blanked out. On one page load in ten it also receives the loading times. The reports pass through our own server first, so Sentry never sees your IP address, and it keeps them for 30 days.

Your choice on the banner applies only to the site where you make it, and is remembered for six months, after which we ask again. You can change your mind at any time through “Cookie settings” in the site's footer. If you withdraw your consent, nothing more is sent to Umami or Sentry. You can also clear any of the items below yourself in your browser's settings, and those with no end date stay until you do.

Who else sees your data

We never sell your information or share it for advertising. Only the service providers below receive it, and each handles it only on our behalf, under a data processing agreement that stops it from using the information for its own purposes.

Our websites, the server behind our assistants and our database run on a server we rent from our hosting provider, a company based in the EU, in its data centre in Frankfurt, Germany. The same company carries our email.

Our AI model provider and our two speech providers, described above, are in the United States. Each receives only what it needs for its task, and the transfer is covered by the standard contractual clauses approved by the European Commission, which are part of our agreement with each of them. You can ask us for a copy.

Umami runs on our own server; analytics data is not sent to Google. Sentry is run by Functional Software, Inc. in the United States. It keeps our reports in its data centre in Frankfurt, and any access to them from the United States is covered by its certification under the same framework and by standard contractual clauses.

Apart from these providers, we pass information on only when the law requires it, for example at the request of a court or the police. Links to other services, such as WhatsApp, Google Maps or our social media pages, send nothing until you click them, and then the privacy notice of the site you land on applies.

How long we keep things

We keep information only for as long as we need it, for the periods given in each section above, and then delete it. The table gives the period for every item in your browser.

Our server is backed up regularly, so something we have deleted can remain in a backup for up to four weeks longer. We use backups only to restore the server after a fault, and if we ever restore one, we delete again anything that should already be gone.

We keep something longer only when the law requires it or when we need it to deal with a legal claim, and then only what is needed, for as long as that lasts.

Your rights

You can ask us at any time, free of charge, for a copy of the information we hold about you and details of how we use it, and have anything wrong corrected, or have it deleted. You can also ask us to restrict its use, and ask for the details you gave us for a call, a message or the waitlist in a common, machine-readable format, to keep or to take elsewhere.

You also have the right to object, at any time, to the uses we base on our legitimate interests: our handling of your conversations with the assistants, typed or spoken, our server logs, and our keeping the details of a call, a message or an email you sent us once we have dealt with it. Tell us why, based on your own situation, and we will stop, unless we have compelling legitimate grounds that outweigh your interests, rights and freedoms, or we need the information to establish, exercise or defend a legal claim.

Where we rely on your consent, for Umami and Sentry and for the waitlist, you can withdraw it at any time, as easily as you gave it: through “Cookie settings” in the site's footer, or by writing to us. Withdrawing doesn't affect what we did with your consent before then.

We never make decisions about you by automated means alone that have legal effects on you or affect you in a similarly significant way.

To use any of these rights, write to •••••@•••••••. We will answer within one month or, if we need up to two more, tell you so within that month. We may ask you to show that you can receive email at the address you used with us, and for a conversation with an assistant, roughly when it took place and what it was about, because we don't keep conversations under your name. What is kept only in your browser never reaches us, so only you can clear it.

If you think we have handled your information unlawfully, you can complain to the data protection authority in the EU country where you live or work, or where you think the breach took place. In Greece that is the Hellenic Data Protection Authority, Kifissias 1-3, 115 23 Athens, telephone +30 210 6475600, email contact@dpa.gr, www.dpa.gr.

Security, children and changes to this page

Every connection to our sites is encrypted, our database can be reached only from inside our own server, and only we have access to that server and to our inbox. If a breach ever puts your information at high risk, we will tell you without undue delay, as the law requires.

Our sites and assistants are meant for adults, not for children under sixteen. If you think a child has given us information, write to •••••@••••••• and we'll delete it.

We update this page when our sites, our providers or the law change, and the date at the top shows when it last changed.

These terms cover your use of noetikon.gr and of our demo sites, Haven, Lucid and Pulse, all run by NOETIKON LTD, the company named at the start of this page. The sites show what we do and don't form a binding agreement. Anything we take on for you, whether a Nex subscription, a custom build or a longer engagement, is agreed separately in writing, and that agreement sets its scope, price and terms.

The demo sites and their assistants are there to show how our work behaves, not to provide a service you can rely on. The businesses on them are invented, so nothing you book, order or send there reaches a real business. They may change, or come and go, without notice, and you shouldn't put real or sensitive information into them or rely on what they tell you for anything that matters.

The words, design and code of our sites, along with our name and marks, belong to us. You are welcome to read, share and link to them, but please don't copy or reuse them as your own without asking first.

We build with care, but our sites and demos are offered as they are, without warranty, and the commitments we actually make to you are the ones written into the agreement that covers your work with us. To the extent the law allows, we are not liable for losses that come from relying on these sites alone.

These terms, and anything arising from your use of our sites, are governed by Greek law, and disputes go to the courts of Athens. If you use our sites as a consumer, you still keep the protection that the law of the country where you live gives you, including the right to take a dispute to the courts there.