Privacy policy

This policy explains how Spesso Technologies AB handles personal data when you visit fabella.io, sign up for our newsletter, contact us, or use Fabella at editor.fabella.io. Fabella is a product of Spesso Technologies AB. Last updated: 5 November 2026.

Who is responsible

Spesso Technologies AB (org. nr. 559598-4310), c/o FGS Global AB, Norrlandsgatan 16, plan 2, 111 43 Stockholm, Sweden, is the controller for the personal data described here. Contact us at contact@fabella.io.

When an organisation uses Fabella to train its own people, that organisation decides how the learners’ data is used and is the controller for it. We process that data on the organisation’s behalf, under our data processing agreement.

What we collect and why

When you visit fabella.io

Our hosting provider processes technical data such as your IP address and browser type to deliver the site and keep it secure. The legal basis is our legitimate interest in running a secure website.

Without cookies, we count page views and how often the prompt box is used on each page, so we know which pages help people get started. We use PostHog for this. PostHog receives your IP address and browser details, uses them to create a random ID that changes every day and to estimate your location, and stores them with the page view in PostHog’s EU cloud. Nothing is stored on your device, and what you type isn’t recorded. The legal basis is our legitimate interest in understanding which pages work.

If you accept cookies, we also use Google Analytics and the LinkedIn Insight Tag to see how the site is used and to measure our advertising. The cookie policy lists them. You can withdraw your consent at any time with the Cookie settings link at the bottom of every page.

When you use the prompt box

When you type what you want to teach and press the button, the text is passed to editor.fabella.io in the link that opens your project, so it can appear in your browser history. The website doesn’t store it, but when the editor opens, our product analytics may record the link. A random ID links the prompt to the project it opens, so we can see how many prompts lead to a course.

When you sign up for the newsletter

We use your email address to send you product news and what we learn about training. We send it with MailerLite, which records whether an email is opened and which links are clicked. The legal basis is your consent. You can withdraw it at any time with the unsubscribe link in every email, or by writing to us.

When you contact us

We use your name, email address and message to answer you, and may keep the conversation in our customer system so we can follow up. The legal basis is our legitimate interest in replying to people who contact us.

When you have a Fabella account

We use your name, email address, login details, your plan and, if you give it, your organisation, to provide Fabella to you. The legal basis is our contract with you.

The content you create

Fabella processes what you give it and what it makes with you: your prompts and chats, material you upload, and the courses you build. AI model providers generate text, images and voice for your courses on our behalf. We use this content only to provide Fabella to you. We don’t use the content you create to train public AI models. The legal basis is our contract with you.

Please don’t put sensitive personal data, such as health data or real patient cases, into Fabella, unless we’ve agreed on it in writing.

Plans and payments

When you buy a plan or credits, a payment provider handles the payment. We receive your billing details and what you bought, but never your full card number. The legal basis is our contract with you, and our legal obligation to keep accounting records.

How you use the editor

We record how the editor is used, including errors and session recordings, to find bugs and improve Fabella. We use PostHog for this. The legal basis is our legitimate interest in a product that works.

When you take a course

If you’re invited to a course, we process your name or email address, your progress, your answers and your results, and show them to the person or organisation that invited you. When that’s an organisation, it’s the controller and we process the data on its behalf.

Who can see your projects

Every project created in 2026 is private, on every plan, and stays private. Only the people you invite can take it. Later, new projects on the Free plan will be published as open educational resources that others can find and learn from. We’ll tell you before that applies, and it never applies to projects created in 2026. Paid plans always publish privately.

Who we share data with

We use service providers who process data on our behalf, under data processing agreements:

  • Webflow, Inc. (website hosting and forms), United States
  • n8n (our automation tool, which passes form sign-ups on to the newsletter and customer systems)
  • Cloudflare, Inc. (spam protection on forms), United States
  • PostHog, Inc. (cookieless website counts, and product analytics, error reports and session recordings in the editor), data stored in the EU
  • Google LLC (Google Tag Manager and Google Analytics, only with your consent), United States
  • MailerLite (newsletter), Lithuania, EU
  • HubSpot, Inc. (customer system), United States
  • Providers of cloud hosting and databases, AI models, payments and billing, and email delivery, for the Fabella product

For the LinkedIn Insight Tag, which runs only with your consent, LinkedIn Ireland Unlimited Company and we are joint controllers for the data the tag collects. LinkedIn’s own privacy policy applies to its processing, and you can exercise your rights with either of us.

We don’t sell personal data. We share it with authorities only when the law requires it. If Spesso Technologies AB is sold or merged, personal data may move to the new owner under this policy.

Some providers are based in, or access data from, countries outside the EU/EEA, such as the United States. Where that happens, the transfer is covered by the EU-US Data Privacy Framework or the EU Commission’s standard contractual clauses. Email us for a copy of the safeguards.

How long we keep it

  • Newsletter: until you unsubscribe.
  • Messages to us: up to 24 months after our last contact.
  • Your account and the content you create: while your account is open. We delete them within 90 days after you close it.
  • Accounting records: 7 years, as Swedish accounting law requires.
  • Analytics events: as long as they help us improve Fabella, and at most 7 years. Session recordings: 30 days. Google Analytics data: at most 14 months.

How we protect it

Data is encrypted in transit and at rest, and only people who need it for their work can reach it.

Your rights

You need an email address to create a Fabella account. Without it, we can’t provide Fabella to you. We don’t make decisions about you based only on automated processing.

You have the right to access your personal data, to have it corrected or erased, to restrict or object to our processing, to data portability, and to withdraw consent at any time. You can object at any time to processing based on our legitimate interest. Email contact@fabella.io and we’ll answer within one month. If you’re a learner in a course an organisation runs, you can also turn to that organisation.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).

Children

Fabella accounts are for adults. People under 16 can only take courses that an organisation runs, and we don’t knowingly collect their personal data otherwise.

Changes

We may update this policy. The date at the top shows the latest version. If a change matters for how we use your data, we’ll tell you by email or in Fabella before it applies.