Privacy Policy

1. General Information

1.1 The following provides information about the processing of personal data when using our website and our service. Personal data refers to any data that can lead to the identification of you as a natural person, e.g., name, address, email addresses, user behavior. Through this, we aim to inform you about our processing operations and at the same time comply with the legal obligations under the EU General Data Protection Regulation (GDPR) and the German TTDSG (Teleservices Data Protection Act), in particular the information obligations pursuant to Art. 13 GDPR.

1.2 Data protection controller in the sense of Art. 4(7) GDPR for this website is:

<Company, Address, Contact details>

You can direct data protection inquiries to: <datenschutz@.....de>

1.3 Where no storage period for personal data is explicitly stated below and it does not already derive from legal provisions, we will consider the following criteria to determine the appropriate storage period:

  • Type, scope, and whether the personal data stored is sensitive;
  • The potential risk that unauthorized use or disclosure of your data could disadvantage you;
  • The purposes for which we process your data (and whether we can achieve these purposes in another way);
  • All applicable legal provisions and requirements.

2. Necessary processing of personal data when accessing our website

2.1 When accessing our website, i.e., merely viewing it without registering, using our service, or otherwise providing information, we process the personal data that your browser transmits to our server. The data described below is technically required for us to display our website and ensure its stability and security and must therefore be processed by us. The legal basis is Art. 6(1) sentence 1 lit. f GDPR. The data your browser transmits are as follows:

  • Name of the retrieved webpage/file
  • Date and time of retrieval
  • Amount of data transferred
  • Notification of successful retrieval
  • Browser type and version
  • Operating system of the requester
  • Referrer URL (the previously visited page)
  • IP address and requesting provider

2.2 You are neither legally nor contractually obligated to provide the aforementioned personal data. Furthermore, providing the aforementioned personal data is not required to conclude a contract with us. However, if you attempt to circumvent the provision of the aforementioned personal data by technical measures, it may result in you being unable to visit our website or our website not displaying correctly.

3. Processing of personal data during contact or use of our service

3.1If you contact us, for example via email or telephone, we process the information you provide in the course of contact (e.g., name, phone number, address, email, your concern). The legal basis of processing is Art. 6(1) sentence 1 lit. a or b GDPR, depending on whether your inquiry is aimed at a future contract conclusion or not..

3.2 If you use our service, we collect the following personal data from you:

  • Account data: When you create an account with us, we collect data associated with your account, including your name, contact information, login data, date of birth, payment information, and payment history.
  • User input: We collect personal data that you provide as input to our service, including your instructions (“prompts”) and other content you upload, such as files, images, and audio, depending on which features of our service you use.

The legal basis of processing in this case is Art. 6(1) sentence 1 lit. b GDPR.

3.3 The data collected in this context will be deleted, insofar as a contractual relationship results from the contact, after the end of the contractual relationship, unless statutory retention periods prevent this. Otherwise, we delete your data as soon as the data is no longer required for further communication with you.

3.4 You are not legally or contractually obliged to provide the aforementioned personal data, unless there is a contractual relationship in the context of using our service; in this case, you are obliged to provide the account data. However, providing the data is a necessary prerequisite for establishing a contractual relationship and using an account with us. If you do not provide the required data, we cannot process your inquiries, and you cannot use our services.

4. Minors

4.1 Our service is not directed at minors under the age of 13. We do not knowingly collect personal data from children under 13. If you have reason to believe that a child under 13 has provided personal data through our service, please notify us at . We will investigate any report, delete the personal data from our systems where applicable, and do our best to ensure that such data is also deleted by any third parties to whom it was transmitted.

4.2If you are over 13 but not yet of legal age (18 years old), your parents must consent to data processing before you begin using our services.

5. Disclosure of your data to third parties

5.1 Our service integrates various components provided by third-party providers. These enable the functionality of our service. The legal basis for processing personal data is Art. 6(1) sentence 1 lit. b GDPR and, if a transfer of personal data abroad occurs, Art. 45(1) GDPR if an adequacy decision exists, otherwise Art. 49(1) sentence 1 lit. a GDPR. The following third-party components are embedded on our website:

5.2The OpenAI API. OpenAI, in addition to us, is also a controller within the meaning of Art. 4(7) GDPR when using our services. You can find which of your data OpenAI processes and how it processes it at the following link: https://openai.com/de-DE/policies/privacy-policy/. The following data is shared with OpenAI:

  • Your user input so that corresponding responses can be generated (“output”)
  • Your age in years to ensure that the output is age-appropriate.

5.3The Stripe payment service from Stripe Payments Europe. Stripe Payments Europe, in addition to us, is also a controller within the meaning of Art. 4(7) GDPR when using our services. You can find which of your data Stripe Payments Europe processes and how it processes it at the following link: https://stripe.com/de/privacy . The following data is shared with Stripe Payments Europe:

  • Your payment information to process payments for paid subscriptions to our service.

5.4Please note that integrating the aforementioned third-party services leads to processing operations of your personal data that involve transferring this data to the USA, even though OpenAI is not certified for the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov/) . Therefore, it cannot be guaranteed that the same level of data protection exists in the USA as in the EU.

5.5You are not legally or contractually obliged to provide the aforementioned personal data and do not have to consent to processing. In this case, however, you cannot use our service.

6. Processing of your data on your devices

6.1 In addition to the aforementioned data, when you use our website, we use technical means for various functions, in particular cookies, which can be stored on your device. When you access our website and at any time thereafter, you have the choice of whether to allow the setting of cookies in general or which individual additional functions you want. You can make changes in your browser settings or via the cookie settings. Below, we first describe cookies from a technical perspective (6.2) before discussing your individual options in more detail.

6.2 Cookies are text files or information in a database that is stored on your hard drive and assigned to the browser you use, allowing the entity setting the cookie to obtain certain information. Cookies cannot execute programs or transmit viruses to your computer but primarily serve to make the internet offering faster and more user-friendly. This website uses the following types of cookies, whose functionality and legal basis we will explain below:

  • Transient cookies: These, in particular session cookies, are automatically deleted when the browser is closed or when you log out. They contain a session ID. This allows the various requests from your browser to be assigned to the same session and your computer to be recognized when you return to our website.
  • Persistent cookies: These are automatically deleted after a predetermined period, which is set differently for each cookie. You can view and manually delete cookies and their durations at any time in your browser settings.

6.3 Mandatory technical functionality required for displaying the website: The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (completely correctly), or support functions could not be enabled. These are generally transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot opt out of these cookies if you want to use our website. The individual cookies are visible in the consent manager. The legal basis for this processing is § 25(2) sentence 2 TTDSG.

6.4 Optional cookies upon your consent: We only set various cookies after your consent, which you can select in the so-called cookie consent tool on your first visit to our website. The functions are only activated if you consent and apply only to the domain . The cookies can in particular serve to analyze and improve visits to our website, facilitate your use across different browsers or devices, or recognize you on a new visit. The legal basis for this processing is § 25(1) TTDSG.

7. Your rights

7.1You have the following rights concerning your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

7.2You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The competent authority for us is

State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5, DE-30159 Hanover
Tel.: 0511-120 4500
Fax.: 0511-120 4599
Email: DSB@lfd.niedersachsen.de

8. Right of withdrawal and right to object

8.1If you have given consent to the processing of your data, you can withdraw this at any time. Such withdrawal affects the lawfulness of processing of your personal data after the time you have communicated the withdrawal to us. The lawfulness of processing of your data up to the time of your withdrawal remains unaffected.

8.2 To the extent we process your personal data based on Art. 6(1) sentence 1 lit. f GDPR, you can object to the processing. If you object, please provide reasons why we should not process your personal data as described here. In the event of your objection, we will examine the matter and either cease or adjust the data processing or inform you of our compelling legitimate grounds for processing.

8.3To exercise your right of withdrawal and objection, a single email to: is sufficient