Privacy policy

Last updated: 2026-05-22

Who we are (data controller)

Mutable Labs B.V. · Leiden, Netherlands · KVK 42018772.
Questions or rights requests: info@mutablelabs.ai.

What we collect, why, and on what basis

This site has two forms. Each collects different data for a different purpose. We collect the minimum needed for the stated purpose and nothing else. No analytics cookies, no third-party trackers.

Contact form (“Discuss a deployment”)

FieldWhy we need itRequired
NameTo address you in our reply.Yes
EmailTo reply to your inquiry.Yes
CompanyTo understand the context of your inquiry and prepare a useful reply.No
RoleTo know who we are talking to (operations, quality, engineering, etc.) and tailor the conversation.No
MessageThe substance of your inquiry. We ask for a short description so we can reply usefully.Yes
IP addressHeld briefly in memory (max 10 min) for rate-limiting only. Not stored, not logged.Automatic

Legal basis: pre-contractual contact under Art. 6(1)(b) GDPR (you are reaching out to discuss working together). Consent for processing is collected via an explicit checkbox on the form.

What we do with it: the submission is sent as an email to info@mutablelabs.ai over SMTP. We do not add you to a mailing list and we do not store the submission in a separate database. Once we have replied and the conversation is over, the email thread sits in our inbox like any other business correspondence.

Retention: the email thread is kept while there is an active business relationship, then archived under standard Dutch bookkeeping retention (7 years for commercial correspondence under Art. 52 AWR). If no engagement follows, we delete on request or after 24 months at the latest.

Newsletter signup (“Join our mailing list”)

FieldWhy we need itRequired
EmailTo send you the newsletter. This is the only detail we ask for.Yes
Privacy consentYou tick a checkbox confirming you have read and accept this policy before subscribing.Yes
UTM parametersTo measure which channel (LinkedIn, an event, a referral) actually brings subscribers, so we know what is working.Automatic
Consent timestampStored alongside your contact (consented_at) as proof of opt-in.Automatic
IP addressHeld briefly in memory (max 10 min) for rate-limiting only. Not stored.Automatic

Legal basis: consent under Art. 6(1)(a) GDPR. You confirm consent by ticking a checkbox (“I have read and accept the privacy policy”) before subscribing. You can withdraw consent at any time via the unsubscribe link in every email.

What we do with it: we store your contact in our self-hosted Keila instance (EU, on our own infrastructure) and send occasional updates. We do not share the list with anyone.

Retention: until you unsubscribe, or until we shut the list down. If you unsubscribe, your record is removed from the active list within 7 days; we keep a hashed record of unsubscribed emails for up to 24 months so we do not accidentally re-add you if you sign up again later.

Processors we use

Your data never leaves the EU/EEA + Switzerland.

Your rights

Under the GDPR / AVG you have the right to:

Every newsletter email contains an unsubscribe link. For everything else, email info@mutablelabs.ai. We respond within 30 days as required by the GDPR; in practice usually within a couple of working days.

Cookies

This site sets no cookies of its own. Plausible Analytics is cookieless.

Changes to this policy

We will update this page when our practices change and bump the “Last updated” date at the top. Material changes that affect existing subscribers will be sent to the list before they take effect.

← Back to mutablelabs.ai