Privacy policy
Last updated: [Date]
Controller
[Name and address of the controller, contact, data protection officer if appointed]
Hosting
[Hosting provider to confirm], [location – EU for EU customers; region for US/UK/CA/AU customers to confirm]. Purpose: operating the website, wizard, customer area and workflows. Legal basis: [Art. 6(1)(b) and (f) GDPR]. Data processing agreement: [to confirm].
Server logs
[Data processed when the site is accessed, retention, legal basis]
Cookies and consent
Necessary cookies (language, consent, sign-in) are always set. Statistics and marketing only with your consent. Change or withdraw your consent at any time in the cookie settings.
Wizard and quotes
[Data processed: workflow description, structured specification, name, company, email; purpose: scoping and fixed-price quote; legal basis; retention]
The description is analysed by an AI model via OpenRouter with zero data retention and without training on your data. The price is never set by the AI – it is calculated by our published pricing rules.
Customer area and sign-in links
[Processing of email address, workflows, run log and review queue; retention]
Orders and payment via Stripe
[Recipient, data transferred, third-country transfer, legal basis]
Sending emails
Transactional emails (sign-in links, quote confirmations, checkout links) are sent via Scaleway Transactional Email (Scaleway SAS, Paris, France). [Legal basis, retention]
Statistics
First-party funnel measurement on our own server, without IP address or fingerprint, only with your consent. [Google Analytics 4 – only after consent and only if used]
Marketing
Google Ads and Microsoft Advertising (UET) conversion tags and ad click IDs (gclid, gbraid, wbraid, msclkid) – only after your marketing consent. [Offline conversion uploads, legal basis, third-country transfer]
Processors and recipients
Who processes data on our behalf, where and why. Advertising providers only after your marketing consent.
| Provider | Purpose | Data | Location | Legal basis |
|---|---|---|---|---|
| Hosting [Provider to confirm] | Website, wizard, customer area, database, workflow hosts | All data processed by the service | [EU – to confirm] | [Art. 28 GDPR, DPA] |
| Transactional email Scaleway SAS, Paris | Sign-in links, quote and checkout emails | Email address, name, message content | France (fr-par) | [Art. 28 GDPR, DPA] |
| AI scoping OpenRouter, Inc. (zero data retention, no training) | Turning the workflow description into a specification | Workflow description | [Region to confirm] | [Art. 28 GDPR / SCC – to confirm] |
| Payments Stripe Payments Europe, Ltd. | Checkout, subscriptions, invoices | Name, email, billing address, payment data | Ireland / USA | [Independent controller / SCC – to confirm] |
| Google Ads (only with marketing consent) Google Ireland Ltd. | Conversion measurement | Click ID, conversion value, cookie IDs | Ireland / USA | Consent (Art. 6(1)(a) GDPR) |
| Microsoft Advertising (only with marketing consent) Microsoft Ireland Operations Ltd. | Conversion measurement (UET) | Click ID, conversion value, cookie IDs | Ireland / USA | Consent (Art. 6(1)(a) GDPR) |
Retention
[General deletion rules]
Your rights
[Access, rectification, erasure, restriction, portability, objection, withdrawal of consent]
Right to lodge a complaint
[Competent supervisory authority]