Privacy & Cookie Policy
Last updated: 2026-07-22
1. Who we are
"BondGraph Studio" (the "Service") is operated by Aieo AB, Sweden ("we", "us"). You can reach us at info@aieo.se.
2. What this policy covers
This policy describes the personal data we process when you visit https://xn--lda.se or call the public HTTP / MCP API at /api/public/* and /api/mcp.
3. Data we process
- Models you build are stored only in your browser (in
localStorage). They are not uploaded to our servers unless you explicitly call the simulation or MCP endpoints with them. - API request payloads sent to
/api/public/simulate,/api/public/render.svgand/api/mcpare processed in-memory to compute the response and are not persisted by us. Standard server logs (IP address, timestamp, URL, status code, user agent) are retained by our hosting provider for security and abuse prevention for up to 30 days. - Cookies and local storage – see the cookie table below.
- We do not run third-party analytics, advertising, social-media trackers, or fingerprinting on this site at this time.
4. Legal basis (GDPR Art. 6)
- Strictly-necessary cookies and request handling — legitimate interest (Art. 6(1)(f)) in delivering the Service you requested.
- Optional cookies (if/when enabled) — consent (Art. 6(1)(a)), collected through the cookie banner. You can withdraw consent at any time via .
5. Cookies and similar storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
| bgs_seen | Necessary cookie | Remembers that you have seen the welcome page so you go straight to the editor next time. | 12 months |
| bgs_consent | Necessary cookie | Stores your cookie preferences from the consent banner. | 12 months |
| bgs-editor-store | Necessary localStorage | Stores the model you are editing, locally in your browser. | Until you clear it |
| theme | Preference localStorage | Stores the light/dark theme you selected. | Until you clear it |
Strictly-necessary cookies do not require consent under the ePrivacy directive. No analytics or marketing cookies are set today; if we ever add them, you will be asked first.
6. Recipients
The Service is hosted on Cloudflare and Lovable infrastructure acting as our processors. We do not sell or share your personal data with third parties for their own purposes.
7. International transfers
Our hosting providers may process data in regions outside the EEA. Where this happens we rely on the European Commission's Standard Contractual Clauses for the transfer.
8. Retention
Models live only in your browser until you delete them. API request payloads are not retained beyond the response. Server access logs are kept up to 30 days for security.
9. Your rights
You have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and the right to lodge a complaint with a supervisory authority. Contact info@aieo.se.
10. Changes
Significant changes to this policy will be announced in-app and the "Last updated" date above will be revised.