Who we are
Spesso Technologies AB (org. nr. 559598-4310), c/o FGS Global AB, Norrlandsgatan 16, plan 2, 111 43 Stockholm, Sweden, is the controller for the personal data in this policy. Reach us at contact@fabella.io for anything about your data.
When an organisation uses Fabella to train its own people, that organisation decides how its learners’ data is used and is the controller for it. We process that data on the organisation’s behalf, under our data processing agreement.
What we collect, why, and our legal basis
- You visit Fabella: IP address, browser type and pages visited, to deliver the site and keep it secure. Legal basis: legitimate interest in running a secure website.
- You reject cookies: page views and prompt-box use, counted without cookies. Our analytics don’t store your IP address, email address or user ID, and we don’t record your session or show you surveys. Visits are grouped by a code that changes every day, so we can’t recognise you the next day. Legal basis: legitimate interest in counting how the site is used.
- You accept cookies: a cookie ID, pages visited and ad clicks, to see how the site is used and to measure and show our ads, as set out in our cookie policy. Once you sign up or sign in, we link your visits to your account (user ID and email address) and record your sessions, with what you type hidden. Legal basis: your consent.
- You use the prompt box: what you type, passed in the link that opens your project, plus an activation ID. The activation ID is a random ID made for each prompt and kept only for your browser session. We send it to our analytics whether or not you accept cookies, so we can count how many prompts lead to a course. If you rejected cookies, we never link it to your email address or account. Legal basis: legitimate interest in understanding how people start using Fabella.
- You contact us: name, email address and your message, by email or in our support chat, to answer you and follow up on your question. Legal basis: legitimate interest in replying to people who contact us.
- You sign up for the newsletter: email address, and whether emails are opened and links clicked, to send you product news plus tips and stats about creating training. Legal basis: your consent.
- You create an account: name, email address, login details, plan, and organisation if you give it, to provide Fabella to you. Legal basis: our contract with you.
- You build courses: your prompts and chats with Fabella, material you upload, the courses you build, and who’s editing with you, to build, edit, voice and publish your courses. Legal basis: our contract with you.
- You use Fabella while signed in: error reports and technical logs, to find bugs and keep Fabella working. Legal basis: legitimate interest in a product that works. If you accept cookies, we also link usage events to your account and record your sessions, with what you type and the editor content hidden. Legal basis: your consent.
- You use AI while building a course: your prompts and the AI’s answers, logged to find errors and improve the answers. Legal basis: legitimate interest in AI features that work.
- You buy a plan: billing details and what you bought, never your full card number, to charge you and keep accounting records. Legal basis: our contract with you, and our legal obligation under Swedish accounting law.
- You take a course you’re invited to: name or email address, progress, answers and results, to run the course and show completion and results to whoever invited you, who can also export them. Legal basis: legitimate interest in running the course you joined. If an organisation runs the course, the organisation decides instead.
You need an email address to create an account, and billing details to buy a plan. Without them, we can’t give you an account or a paid plan. Your browser sends technical data whenever you visit a website. Everything else is your choice.
Accepting our terms of service, or reading this policy, isn’t consent to analytics. You only give that consent in the cookie banner.
We remove your prompt from the address bar once your project opens, but it can still show up in your browser history.
How Fabella uses AI
Fabella uses AI only while a course is being built. When learners take a course, their data isn’t processed by AI.
The models that write with you run on our cloud provider’s servers. Requests are routed globally, so your prompts may be processed outside the EU. They aren’t stored once the answer is sent, aren’t shared with the companies that made the models, and aren’t used to train them.
We keep AI logs on EU servers. They use an internal user ID instead of your email address, and we remove personal or sensitive information before storing them.
AI voice is made by text-to-speech providers, and subtitles by a speech-to-text provider, all in the United States. They only receive the course text or audio they need for that.
Cookies
We only use analytics and advertising cookies if you accept them. Our cookie policy lists every cookie, explains how analytics works with and without consent, and covers the LinkedIn and Google ad tags. You can change your choice at any time with the Cookie settings link at the bottom of every page, or in your account settings in Fabella.
Who can see your projects
Every project created in 2026 is private, on every plan, and stays private. Only the people you invite can take it. Later, new projects on the Free plan will be published as open educational resources that others can find and learn from. We’ll tell you before that applies, and it never applies to projects created in 2026. Paid plans always publish privately. You own everything you create.
Once Free projects can be public, don’t put personal data about other people, or sensitive data such as health information, in a project that will be published publicly.
Who we share data with
We use service providers who process data on our behalf, under data processing agreements. Email us if you want a list of them by name.
- Website hosting and forms: technical data and form entries. United States.
- Spam protection on forms: technical data from your browser. United States.
- Hosting for our own support chat and form automation: chat messages, name and email address. EU servers, run by a US company.
- Website and product analytics: page views and usage events, plus session recordings if you accept cookies. EU servers, run by a US company.
- Error and performance monitoring: technical logs, which can include user IDs and IP addresses. EU servers, run by a US company.
- Newsletter: email address, opens and clicks. EU.
- Account and course emails: name, email address and course completion. EU.
- Our email inbox and file storage: messages you send us. EU and United States.
- Cloud servers: account data, prompts and content you create. United States.
- AI writing models: prompts and content you create. Routed globally, not stored.
- AI request logging: prompts and AI answers. EU.
- Real-time collaboration in the editor: user ID, who’s online, approximate location and the content you edit together. United States, with live editing routed through a global network.
- AI voice: course text to be read aloud. United States.
- Subtitles: course audio, turned into text. United States.
- Payments: billing details. EU and United States.
LinkedIn and Google also receive data from their ad tags, as explained in our cookie policy.
We don’t sell personal data. We share it with authorities only when the law requires it. If Spesso Technologies AB is sold or merged, personal data may move to the new owner under this policy.
Transfers outside the EU
Several of the providers above are in the United States, or are US companies running EU servers. Those transfers rely on the EU-US Data Privacy Framework, which the EU Commission has found gives adequate protection. Where a provider isn’t certified, or as an extra safeguard, we use the EU Commission’s standard contractual clauses. Email us at contact@fabella.io if you want a copy of the safeguards.
How long we keep it
- Technical data from website visits: 30 days.
- Website and product analytics: up to 7 years.
- Session recordings: 30 days.
- Monitoring logs: 12 months.
- AI request logs: up to 90 days.
- Messages to us: up to 24 months after our last contact.
- Newsletter: until you unsubscribe.
- Your account and the content you create: while your account is open. We don’t delete accounts automatically. When you close your account or ask us to delete it, we do so within 90 days.
- Learner results: as long as the course’s author keeps the course, or as the organisation decides.
- Accounting records: 7 years, as Swedish accounting law requires.
- Cookies: as listed in our cookie policy.
How we protect it
Data is encrypted in transit and at rest, and only people who need it for their work can reach it.
Your rights
- Access. You can get a copy of the personal data we have about you.
- Correction. You can have wrong or incomplete data corrected.
- Erasure. You can ask us to delete your data, for example when we no longer need it or you withdraw your consent. We may have to keep some data when the law requires it, such as accounting records.
- Restriction. You can ask us to store your data but not use it, for example while we check whether it’s correct.
- Portability. Where we process data based on your consent or our contract with you, you can get the data you gave us in a machine-readable format and have it moved to another service.
- Withdrawing consent. Where we rely on your consent, you can withdraw it at any time. It doesn’t affect what happened before.
Your right to object. You can object at any time to processing based on our legitimate interest, such as analytics. We’ll then stop, unless we have compelling reasons that outweigh your interests, or need the data for a legal claim. You can always object to direct marketing, and we’ll stop at once.
To use your rights, email contact@fabella.io. We’ll answer within one month. If a request is complex, we can take up to two more months, and we’ll tell you why. If you’re a learner in a course an organisation runs, you can also turn to that organisation.
Children
Fabella accounts are for adults. People under 16 can only take courses that an organisation runs, and we don’t knowingly collect their personal data otherwise.
Complaints
If you think we handle your data wrongly, please tell us first at contact@fabella.io. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se), or to the data protection authority in the EU country where you live or work.
Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change matters for how we use your data, we’ll tell you by email or in Fabella before it applies.