Privacy notice
This page is incomplete. The provider details (LEGAL_* in the configuration) are missing. They must be filled in and the text reviewed by a lawyer before going live.
Controller
[LEGAL_COMPANY_NAME fehlt]
[LEGAL_ADDRESS fehlt]
[LEGAL_EMAIL fehlt]
What data we process
Your account
Email address, name (if supplied), company name and your chosen language. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
Your websites
The domains you connect, the pages we fetch and their content, measured values and the findings derived from them. We only fetch your website after you have proven ownership. Legal basis: performance of a contract.
Notifications
Email address for reports and alerts. For WhatsApp additionally your mobile number, only after you have explicitly confirmed by replying with a code (Art. 6(1)(a) GDPR). You can object at any time by replying STOP; the objection is recorded immediately and permanently.
Payment data
Payment data is processed exclusively by Stripe. Card details never reach our servers. We store only a customer identifier, the plan and the billing period.
Log data
Server logs containing IP address, timestamp and requested path, to prevent abuse and diagnose faults. Legal basis: legitimate interest, Art. 6(1)(f) GDPR. Deleted after 30 days.
Artificial intelligence
To generate fixes we send excerpts of your website's content to OpenAI. To measure your visibility in AI answers we submit the queries you have configured. No personal data about your own customers is transmitted, and the data is not used to train models.
Processors
We use the following service providers. Data processing agreements are in place with all of them; transfers to the USA rely on standard contractual clauses.
| Provider | Purpose | Location |
|---|---|---|
| Hosting provider | Running the servers and database | EU |
Cookies
We use only strictly necessary cookies: one for your session, one for the active workspace and one for your language choice. We use no analytics or advertising cookies, which is why there is no consent banner.
Retention
- Account and website data: until you delete your account.
- Audits and reports: 24 months, so trends stay meaningful.
- Invoicing records: 10 years, as required by section 147 AO.
- Server logs: 30 days.
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent at any time. Contact us at [LEGAL_EMAIL fehlt]. You may also lodge a complaint with your competent data protection authority.
Data processing agreement
Where we process personal data on your behalf, we provide a data processing agreement under Art. 28 GDPR on request.