1. Who we are
Aneo B.V. is a company registered in The Netherlands. Our registered address is Thomas Morelaan 104, 2135 WC Hoofddorp, Netherlands. You can contact us at hello@aneo.io for general enquiries and privacy@aneo.io for privacy questions.
2. What cookies are
Cookies are small text files placed on your device by a website or application. They can help a site remember information, keep a session active, secure accounts, measure usage, or support optional features.
Similar technologies include local storage, session storage, pixels, tags, SDKs, scripts, device identifiers, and server-side logs that can store or access information on your device or browser.
3. Scope of this policy
This policy applies to the public website at www.aneo.io, related aneo.io subdomains, product and account surfaces such as app.aneo.io, contact forms, support surfaces, and other digital services operated by Aneo B.V.
The logged-in product application may use additional cookies or storage that are necessary for authentication, security, product functionality, billing, support, and customer-specific workflows.
4. Why we use cookies and similar technologies
We use cookies and similar technologies only where they support a legitimate website or product purpose, where they are necessary to provide a requested service, or where we have the required consent.
- To make the website and product application work reliably.
- To keep users signed in and protect account sessions.
- To remember cookie choices, language, form state, or interface preferences.
- To secure the website and product against abuse, fraud, unauthorized access, and technical attacks.
- To understand website performance, guide usefulness, product interest, and content quality.
- To support contact forms, demo requests, product onboarding, billing, and customer support.
- To measure marketing effectiveness where permitted and configured.
- To support integrations with identity, payment, analytics, support, or communication tools where enabled.
5. Cookie categories we use
Our live cookie banner categories have included Necessary, Marketing, Analytics, Preferences, and Unclassified. The categories below explain what those categories mean and how they may be used across aneo websites and product surfaces.
6. Necessary cookies
Necessary cookies help make a website or product usable by enabling basic functions such as page navigation, secure areas, login sessions, fraud prevention, consent records, form protection, load balancing, and account security.
These cookies are normally active because the website or product cannot function properly without them. Where allowed by law, they may be used without consent.
- Examples of purposes: session management, authentication, security, consent storage, routing, form submission, CSRF protection, and service availability.
- Typical duration: session-only to several months, depending on the purpose.
- Legal basis where personal data is involved: performance of a contract, legitimate interests, and legal obligation where applicable.
7. Preferences cookies
Preference cookies allow the website or product to remember choices that change how the service behaves or looks. These may include language, region, interface settings, dismissed banners, form state, or accessibility preferences.
Preference cookies are optional unless they are strictly necessary to provide a setting you specifically requested.
- Examples of purposes: language preference, region preference, saved UI choice, display preference, and remembered consent settings.
- Typical duration: session-only to 12 months.
- Legal basis where personal data is involved: consent or legitimate interests, depending on the context and local law.
8. Analytics cookies
Analytics cookies help us understand how visitors interact with the website and, where configured, how users interact with product features. They may collect information such as pages viewed, referral source, browser type, device type, approximate location from IP address, time on page, events, and error information.
Analytics should be configured with privacy controls where practical, such as IP masking or reduced retention, and with consent prompts where required.
- Examples of purposes: understanding content usefulness, improving page structure, measuring product interest, detecting broken journeys, and improving performance.
- Possible providers: analytics or product-measurement providers such as Google Analytics or privacy-focused alternatives, where enabled.
- Typical duration: session-only to 24 months, depending on provider configuration.
- Legal basis where personal data is involved: consent where required, or legitimate interests where lawful and appropriate.
9. Marketing cookies
Marketing cookies may be used to understand campaign performance, measure referrals, support business-to-business marketing, limit repeated messages, or provide more relevant product content. They may also be set by third-party services used for advertising, social media, embedded content, or campaign measurement if those tools are enabled.
Marketing cookies are optional and should only be used with consent where required. You can decline them without losing access to the core website.
- Examples of purposes: campaign measurement, referral tracking, social media link measurement, remarketing, content relevance, and ad performance.
- Possible providers: advertising, social media, CRM, campaign, or analytics providers, where enabled.
- Typical duration: session-only to 24 months, depending on provider configuration.
- Legal basis where personal data is involved: consent where required.
10. Unclassified cookies
Unclassified cookies are cookies or similar technologies that are still being reviewed, categorized, or documented. If we identify an unclassified cookie, we aim to assess its provider, purpose, duration, and category and update our configuration or policy where needed.
If an unclassified cookie is not necessary, it should not be treated as necessary merely because classification is incomplete.
11. Product application cookies and storage
The logged-in aneo application may use cookies, local storage, session storage, or similar technologies for authentication, account security, role-based access, product navigation, document generation workflows, incident tickets, support, billing, and error handling.
Framework-Pro may use cookies or storage to support account access, framework readiness workflows, questionnaire progress, payment flow, downloadable outputs, and security controls. IncidentAI may use cookies or storage to support enterprise login, roles, incident records, triage workflows, audit logs, and configured integrations.
12. Authentication and identity providers
If you sign in using an identity provider such as Google, Microsoft, LinkedIn, or another provider enabled for your organization, that provider may place its own cookies or use its own storage technologies. Those cookies are controlled by the identity provider and are governed by its privacy and cookie policies.
Authentication cookies and tokens are important for secure account access. Blocking them may prevent the product from working.
13. Payment and billing cookies
Where online payment is available, such as for Framework-Pro, payment providers may use cookies and similar technologies to process payments, prevent fraud, remember checkout state, comply with financial obligations, and secure transactions.
Payment provider cookies are usually controlled by the relevant provider and may be necessary to complete a transaction.
14. Embedded content and third-party links
Our website may link to or embed third-party content, social media pages, videos, maps, scheduling tools, forms, documentation, payment flows, or other external services. These third parties may set their own cookies when you interact with their services.
We do not control third-party cookies that are set by other websites or providers. Their use is governed by the third party's own privacy and cookie notices.
15. Consent and cookie choices
Where cookies or similar technologies require consent, we aim to request consent before using them. You may be able to accept all cookies, reject non-essential cookies, or choose categories through a cookie banner or settings tool where such tool is active.
You can withdraw or change consent at any time through the cookie settings tool where available, by clearing cookies in your browser, by adjusting browser settings, or by contacting us if you need help.
16. Browser controls
Most browsers allow you to block cookies, delete cookies, block third-party cookies, clear site data, or set privacy controls. Browser settings are device and browser specific, so you may need to update settings separately on each browser and device you use.
If you block all cookies, some parts of the website or product may not work properly. In particular, account login, security controls, payment flows, consent records, and product workflows may require necessary cookies or storage.
17. Do Not Track and global privacy signals
Some browsers or extensions send Do Not Track or global privacy signals. The legal and technical treatment of these signals varies by jurisdiction and provider. Where required and technically feasible, we aim to respect legally recognized consent or opt-out signals.
Because standards continue to evolve, we may not respond to every browser signal in the same way. You can always use the cookie banner or browser settings where available.
18. Cookie duration
Cookies may be session cookies, which expire when you close your browser, or persistent cookies, which remain for a defined period unless you delete them earlier.
The duration depends on the purpose, provider, product configuration, and legal requirements. Necessary cookies may last long enough to preserve security, login, or consent state. Analytics and marketing cookies should use reasonable retention limits configured in the relevant provider tools.
19. Data collected through cookies
Cookies and similar technologies may collect or help process technical and usage data. Depending on configuration, this can include IP address, device identifiers, browser, operating system, pages visited, links clicked, referral URLs, timestamps, session identifiers, product events, approximate location, and consent choices.
Where this information identifies or can reasonably relate to a person, we handle it as personal data under our Privacy Policy.
20. Legal bases
For strictly necessary cookies, we may rely on performance of a contract, legitimate interests in operating a secure service, or legal obligation where applicable. For non-essential cookies such as many analytics, preferences, or marketing cookies, we rely on consent where required.
Consent can be withdrawn at any time. Withdrawal does not affect processing that occurred before withdrawal.
21. Sharing with providers
Cookie and similar technology data may be processed by service providers that help us operate the website and products. These may include hosting providers, analytics providers, payment providers, identity providers, CRM providers, support tools, security tools, and communication tools.
Where providers process personal data for us, we use appropriate contractual, security, and data protection measures. Some providers may also act as independent controllers for their own services.
22. International transfers
Some cookie or analytics providers may process data outside the European Economic Area. Where personal data is transferred internationally, we use appropriate safeguards where required, such as adequacy decisions, Standard Contractual Clauses, data processing agreements, and provider due diligence.
23. Current implementation note
The public website is being rebuilt as a static website. If no non-essential cookies or analytics are enabled at launch, the website may use fewer cookies than described in the optional categories above. This policy is written to cover the public website, product surfaces, and future configurations where these technologies may be enabled.
Before enabling new analytics, marketing, embedded-content, or tracking technologies, we should review the cookie category, consent requirement, provider, retention, and policy text.
24. Relationship with the Privacy Policy
This Cookie Policy explains cookies and similar technologies. Our Privacy Policy explains the wider handling of personal data, including account data, contact data, Customer Content, product usage, AI processing, payments, retention, security, and your privacy rights.
25. Changes to this Cookie Policy
We may update this Cookie Policy when we change our website, product configuration, cookie banner, providers, analytics tools, marketing tools, consent approach, or legal requirements. When we update it, we will change the Last updated date.
26. Contact
Cookie and privacy questions can be sent to privacy@aneo.io.
General enquiries can be sent to hello@aneo.io.
Postal address: Aneo B.V., Thomas Morelaan 104, 2135 WC Hoofddorp, Netherlands.