Cookies Policy
What cookies Premisio uses across the marketing site, the app, and the identity service, why we use them and how you can manage them.
Premisio OÜ is in formation. The company is currently being registered with the Estonian Business Register (Äriregister). During this formation period, the service is operated by Asad Rizvi, a natural person resident in Estonia, who acts as the data controller (for purposes of the Privacy Policy) and the counter-party (for purposes of these Terms). All obligations and rights transfer to Premisio OÜ on its registration. This page will be updated within 7 days of registration.
Draft, pending legal review. Last updated 25 April 2026. Final version will be reviewed by counsel before Premisio’s general release.
Where this policy applies
This policy covers all Premisio surfaces under the premisio.com domain:
premisio.com, the marketing website (this site)app.premisio.com, the Premisio application where you manage your buildingsid.premisio.com, the identity service (sign-in, sign-up, OAuth)
Wherever you see a Premisio link to “Cookie policy”, it points back here. Your consent choice is stored as a single cookie scoped to .premisio.com, so the choice you make on the marketing website also applies inside the app and the identity service, you only decide once.
The short version
Premisio uses strictly-necessary and preference cookies by default, and a small set of optional, consent-required third-party tools, chat support and analytics, that load only after you accept the cookie banner. We do not run behavioural advertising, retargeting, or cross-site profiling.
The first time you visit any Premisio surface, you will see a small consent banner. Reject and the optional tools never load; accept and the cookies listed below are set. You can change your choice any time using the link at the bottom of this page (or via the matching link in the app).
What is a cookie
A cookie is a small text file that a website stores on your device (usually in your browser). Cookies let a site remember things about you between visits or between pages, such as your language preference or whether you are logged in.
Some cookies are essential for a site to work (these are “strictly necessary”). Others are optional (preferences, analytics, advertising). Under EU law, optional cookies require your consent before they are set.
Cookies Premisio uses
Strictly necessary cookies
These cookies are required for Premisio to function. They do not require consent under EU cookie law (ePrivacy Directive Article 5(3) exemption). Blocking these cookies will break core functionality like signing in.
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
ory_kratos_session | id.premisio.com | Identifies your login session with Ory Kratos. | Session or 30 days if “keep me logged in” is selected. |
ory_hydra_session | id.premisio.com | Supports the OAuth2 consent and token flow. | Session. |
ory_hydra_csrf | id.premisio.com | CSRF protection for the OAuth2 consent page. | Session. |
ory_kratos_csrf | id.premisio.com | CSRF protection for login and registration forms. | Session. |
premisio_authed | .premisio.com | Cross-subdomain hint that you are signed in, used to swap “Log in” for “Open Premisio” on the marketing site. Contains no personal data. | Tied to your session. |
Preference cookies
These cookies remember your non-essential choices. They are set only when you make a choice that triggers them, and they store no personal data beyond the preference value itself.
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
premisio_locale_pref | .premisio.com | Remembers your language preference (English, Estonian, or Russian) so pages load in your chosen language on return visits. | 1 year. |
premisio_locale_dismissed | .premisio.com | Remembers that you dismissed the language-suggestion banner so it does not reappear. | 90 days. |
premisio_consent | .premisio.com | Remembers your choice on the cookie-consent banner (accepted or rejected) so the banner does not reappear. | 1 year. |
Optional / consent-required cookies (third-party)
This category loads only after you click Accept on the cookie-consent banner. We do not store or share any data with these third parties unless you have given consent.
HubSpot, chat widget
Where: marketing website (premisio.com) only. Not loaded inside the app.
Premisio uses HubSpot’s chat widget to let visitors talk to our team in real time about sales, support, and partnerships. HubSpot is a CRM and marketing platform operated by HubSpot, Inc. (United States, with EU data residency available).
When you accept consent, HubSpot loads its chat widget script and may set the following cookies on your device:
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
__hssc | .premisio.com | HubSpot session counter, tracks pageviews within a single chat session. | 30 minutes. |
__hssrc | .premisio.com | Tracks whether a user has restarted their browser session. | Session. |
__hstc | .premisio.com | HubSpot’s main cookie for tracking visitors, first/last visit timestamps and visit count. | 6 months. |
hubspotutk | .premisio.com | HubSpot user token, identifies a unique visitor across pages on the marketing website. | 6 months. |
messagesUtk | .premisio.com | HubSpot Messages cookie, keeps the chat conversation associated with the same visitor between pages. | 6 months. |
Cookie names, durations, and behaviour are documented by HubSpot directly: see HubSpot’s own cookie reference for the most current list. We pass through their behaviour without modification.
What happens if you reject: the HubSpot script never loads, no HubSpot cookies are set, and the chat widget does not appear. You can still contact us by email at hello@premisio.com, there is no degradation in service for users who reject.
What happens to data shared in chat: if you start a chat conversation, the message content and any contact details you type are stored by HubSpot under HubSpot’s data-processing terms, which we agree to as a HubSpot customer. We are the data controller for the conversation; HubSpot is the data processor. EU data residency is configured.
Google Analytics, site analytics
Where: marketing website (premisio.com) only. Not loaded inside the app.
We use Google Analytics 4 to understand how visitors use the marketing website (which pages get visited, how long sessions last, where traffic comes from). It helps us decide what to write next, what to improve, and where to focus.
When you accept consent, Google Analytics loads its tracking script and may set the following cookies on your device:
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
_ga | .premisio.com | Distinguishes unique visitors. | 2 years. |
_ga_<id> | .premisio.com | Persists session state for the GA4 property. | 2 years. |
We have IP anonymisation enabled in our Google Analytics configuration. We do not use Google Signals, Google Ads remarketing audiences, or any cross-site profiling that GA4 could otherwise enable.
What happens if you reject: the Google Analytics script never loads, no GA cookies are set, and no analytics data is sent to Google.
More information: see Google’s cookie usage documentation and Google’s privacy policy.
PostHog, product analytics
Where: marketing website (premisio.com) and the app (app.premisio.com). Not loaded inside the identity service.
We use PostHog (cloud-hosted, EU region) to understand how people interact with both the marketing site (clicks, scroll depth, navigation paths) and the app itself (which features get used, where workflows get stuck, what gets abandoned). PostHog is an open-source product analytics platform.
When you accept consent, PostHog loads its tracking script and may set the following cookies on your device:
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
ph_<project>_posthog | .premisio.com | Identifies a unique visitor and persists session state. | 1 year. |
ph_<project>_window_id | .premisio.com | Identifies the current browser window for session-level analytics. | Session. |
PostHog’s EU region keeps all collected data within EU data centres.
What happens if you reject: the PostHog script never loads, no PostHog cookies are set, and no analytics data is sent.
More information: see PostHog’s privacy policy and PostHog’s privacy documentation.
Cookies we do NOT use
For clarity, Premisio does not set or permit:
- Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, or any other social-media advertising tracker.
- Google Ads, programmatic-display, or retargeting cookies of any kind.
- Cross-site profiling cookies for advertising purposes.
Google Analytics and PostHog (above) are used for first-party analytics only, measuring how the site itself is used, not building advertising profiles or sharing data with ad networks.
How to manage cookies
On Premisio: click to reopen the consent banner and change your choice. Your previous choice is cleared, the banner reappears, and you pick again.
In your browser: you can also block or delete cookies via your browser settings. Blocking strictly-necessary cookies will prevent you from signing in to Premisio. Blocking preference cookies will not break the site but may reset your language choice.
Common browser guides:
Changes to this policy
If we add, remove, or change cookies, we will update this page. Material changes (for example, adding a new third-party tool that requires consent) will also be announced through a notice on the marketing website and the consent banner will re-prompt you to make a choice.
Questions
Email hello@premisio.com.