Privacy Policy

Pirana BV, Soeteweystraat 5, 3120 Tremelo, Belgium (VAT BE0829292095), is the data controller for the processing of personal data via this website and the PAI advisory flow. For privacy questions, you can reach us at info@pirana.be.

We process the following categories of personal data:

• •The website URL you provide to PAI for analysis
• •Email address — to deliver your PAI analysis and report
• •Name, phone number, company name, website and message — via the contact or booking form
• •Information you confirm or correct about your business (business activity, target audience, improvement goal) — via the 3-question check
• •Number for our messaging service and opt-in — if you choose message communication
• •Appointment details (date, time, topic, online meeting link) — when booking a meeting
• •The generated PAI report and the analyses it contains
• •Internal PAI Deep Dive — an in-depth internal analysis that Pirana uses solely to prepare for a meeting; it is not visible to prospects or customers
• •Technical data such as IP address, browser type and pages visited — solely to secure and operate the website

We process your data for the following purposes:

• •Creating a PAI website and AI analysis based on publicly accessible information from the URL you provide
• •Preparing a PAI report and delivering it to you by email
• •Scheduling and confirming an appointment
• •Preparing for a meeting (internal PAI Deep Dive)
• •Customer management, follow-up and administration
• •Contacting you personally about your analysis and possible next steps — only if you have explicitly given consent

When you provide a website URL to PAI, it analyses the publicly accessible information of that website to create a website and AI analysis. PAI may consult the content of the provided website via a crawling service. The analysis contains findings about your website, AI opportunities and automation possibilities. PAI then checks your business activity, target audience and improvement goal via a 3-question check — you can confirm or correct PAI's assessment. Based on this, PAI prepares a report that we deliver to you by email. The generated reports and analyses are stored and linked to your lead or customer record. An internal PAI Deep Dive may be generated to prepare for a meeting; this is visible only to Pirana.

We process your personal data on the following legal bases:

• •Consent (Art. 6 §1 a GDPR) — for delivering the PAI report by email and for commercial follow-up if you opt in
• •Performance of pre-contractual measures at your request (Art. 6 §1 b GDPR) — for scheduling and organising an appointment and preparing the analysis you requested
• •Legitimate interest (Art. 6 §1 f GDPR) — for customer management, internal analysis in preparation for a meeting, and website security

[to be completed by Pirana — retention periods per category still need to be defined]

We keep your data only as long as necessary for the purpose for which it was collected. Non-converted leads are kept for a maximum of 24 months after your last interaction. PAI reports and PAI Deep Dives are kept for the duration of the customer relationship and thereafter for the legal retention period for accounting and tax purposes. Message communication is deleted 24 months after the last message. Appointment data is deleted 12 months after the appointment, unless you became a customer. The final periods are set by Pirana and published here.

PAI uses AI models (Large Language Models) via our cloud platform to analyse your website, generate reports and prepare internal analyses. The following data is sent to the LLM provider: the public content of the website you provided (crawled via Firecrawl), your confirmed business activity, target audience and improvement goal, and — for the PAI Deep Dive — a summary of the previous analysis. We NEVER send your name, email address, phone number or messaging service number to the LLM provider. The provider may process the website content and instructions under its own terms. Whether the provider retains data or uses it for model training depends on the contractual agreements between our cloud provider and the LLM provider — this falls under our cloud provider's responsibility as a processor.

PAI automatically generates analyses, recommendations and scores about your website and business. This is profiling within the meaning of the GDPR, but it is advisory only — PAI does not take automated decisions with legal or similarly significant effects for you (Article 22 GDPR is not applicable). All recommendations that Pirana communicates to you (such as PAI Insights) are first reviewed and approved by a human Pirana employee before being sent. The internal PAI Deep Dive is visible only to Pirana and serves as preparation for a meeting — the outcome has no direct consequences for you.

Your data may be shared with the following categories of recipients and processors:

• •Our cloud/hosting provider — hosting and database (processor)
• •Google LLC (United States) — Google Analytics 4, only if you have given consent via the cookie banner
• •Google LLC (United States) — Google Calendar, for scheduling appointments
• •OpenAI / LLM provider (United States) — AI analysis via our cloud platform
• •Firecrawl — crawling of the website you provided
• •Resend — email delivery
• •Meta Platforms (United States) — messaging service, only if you choose it

We do not share your data with other third parties for commercial purposes beyond those listed here. Processors act on the basis of a data processing agreement and may only use your data on behalf of Pirana.

Some processors (Google, OpenAI, Meta) process data in the United States, outside the European Economic Area. For this transfer, appropriate safeguards are used, such as Standard Contractual Clauses (SCCs) as approved by the European Commission, and — where applicable — additional technical and organisational measures.

As a data subject, you have the following rights:

• •Right of access to your personal data
• •Right to rectification of inaccurate data
• •Right to erasure ("right to be forgotten")
• •Right to restriction of processing
• •Right to object to processing
• •Right to data portability
• •Right to withdraw your consent at any time (for processing based on consent)

To exercise your rights, contact us at info@pirana.be. We respond within one month. Withdrawing your consent does not affect prior processing.

If you have a complaint about how we process your personal data, you can file a complaint with the Belgian Data Protection Authority (APD/GBA): contact@apd-gba.be or via gegevensbeschermingsautoriteit.be.