CASAI

Privacy policy

Last updated: 2026-07-27.

This privacy policy explains how Diagona AB (“Diagona”, “we”) processes personal data when you visit casai.io and use its forms. It covers the website, not a customer’s use of the CASAI product in production (that is governed by customer agreements and data processing agreements).

Controller

The controller is Diagona AB, Planiavägen 11, Nacka, Sweden. Contact: info@casai.io, phone +46 8 528 00 102.

Data we collect

Data you submit in forms, for example when booking a walkthrough or downloading the procurement guide:

  • Name, email, phone, company name, role and job title
  • Your consent to processing and, if you choose, to further communications
  • Message or other free text if you send any

Technical data that may arise when you visit the website, such as IP address, browser type, page views and similar diagnostics. Where cookies or similar technologies are used, consent is managed via our cookie banner (CookieYes).

Purposes and legal bases

  • Handle your request or send requested materials (legitimate interest or consent, depending on the situation)
  • Send other communications if you have expressly consented
  • Operate, protect and improve the website (legitimate interest)
  • Web analytics and statistics via Google Analytics 4 — only after your consent via the cookie banner
  • Behavioural analytics via Microsoft Clarity (heatmaps and session recordings) — only after your consent via the cookie banner
  • Website tracking via HubSpot (page views and lead attribution) — only after your consent via the cookie banner
  • Comply with legal obligations where applicable

Recipients and processors

We use providers to run the website and forms. They process data on our instructions:

  • HubSpot (form submissions, CRM-related lead handling and website tracking after consent)
  • Vercel (website hosting)
  • Sanity (content management; typically not form personal data)
  • CookieYes (cookie consent and banner)
  • Google (Google Analytics 4 / Google Ireland Limited and, where applicable, Google LLC in the USA) — web analytics after consent
  • Microsoft (Microsoft Clarity / Microsoft Corporation) — behavioural analytics after consent

Providers may be established outside Sweden or the EU/EEA. Where that happens we use appropriate safeguards under applicable data protection rules, such as standard contractual clauses where required. More about Google’s processing is available in Google’s privacy policy: https://policies.google.com/privacy. More about Microsoft’s processing is available in Microsoft’s privacy statement: https://privacy.microsoft.com/privacystatement. More about HubSpot’s processing is available in HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy

Retention

We keep personal data only as long as needed for the purpose, for example to handle your request and any follow-up dialogue, or until you withdraw consent. Data is then deleted or anonymised unless law requires longer retention. Analytics, Clarity and HubSpot tracking data is retained according to our settings with each provider and deleted or anonymised when no longer needed for statistics, improvement and lead handling.

Your rights

You may have rights of access, rectification, erasure, restriction, objection and data portability under the GDPR, and to withdraw consent without affecting prior lawful processing. Contact info@casai.io. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Cookies and web analytics

We use a cookie banner (CookieYes) so you can choose which cookie categories and similar technologies are allowed. Necessary cookies may be required for the site to function. You can change or withdraw your choice at any time via the banner settings.

If you accept analytics cookies, we use Google Analytics 4 (GA4) to understand how the website is used, for example which pages are visited and roughly how visitors navigate. GA4 may process technical data such as page views, device and browser information, and IP address (which Google may truncate or process according to its settings). The legal basis is your consent. Without consent, this analytics is not activated.

If you accept analytics cookies, we also use Microsoft Clarity for behavioural analytics: heatmaps (where visitors click and scroll) and session recordings (how a visitor moves through pages). Clarity may process technical data such as page interactions, device and browser information, and similar diagnostics. Sensitive content is masked by Clarity by default. The legal basis is your consent. Without consent, Clarity cookies for full functionality are not set. More information: https://clarity.microsoft.com/

If you accept analytics and/or marketing cookies according to your choices in the cookie banner, we use HubSpot’s tracking code to understand which pages are visited and to attribute website visits to leads in our CRM where possible. HubSpot may set cookies and process technical data such as page views and device information. The legal basis is your consent. HubSpot’s own cookie banner is disabled on this website; consent is managed via CookieYes. More information: https://legal.hubspot.com/privacy-policy

Changes

We may update this policy when website features or legal requirements change. The current version is published on this page with the date above.