Introduction and Data Controller
We appreciate your interest in our website and services. The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of legal provisions (GDPR, Austrian TKG 2003).
Data Controller:
What Data We Collect
When Using Our Website
When you visit our website, the following data is automatically collected:
- IP address (anonymized)
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
- Pages visited
During Registration
When you create an account, we collect:
- First and last name
- Email address
- Password (stored encrypted)
- Company name (optional)
When Using Our Services
To provide our chatbot services, we process:
- Website URLs you want to scan
- Scraped content from your website (for knowledge base)
- Third-party API keys (OpenAI, Claude, Gemini)
- Chat histories and conversations
- Usage statistics
Purpose of Data Processing
We process your data for the following purposes:
- Providing and improving our services
- Creating and managing your user account
- Technical support and customer service
- Security and fraud prevention
- Fulfilling legal obligations
- Billing and payment processing (for paid plans)
Legal Basis
The processing of your data is based on the following legal grounds:
- Art. 6(1)(a) GDPR: Consent (e.g., for cookies, newsletters)
- Art. 6(1)(b) GDPR: Contract performance (using our services)
- Art. 6(1)(c) GDPR: Legal obligation
- Art. 6(1)(f) GDPR: Legitimate interest (website optimization, security)
Storage Duration
We store your data only as long as necessary for the stated purposes:
- Account data: Until account deletion
- Chat histories: 12 months (or until deletion upon request)
- Invoice data: 7 years (legal retention requirement)
- Server logs: 30 days
Data Sharing
We only share your data in the following cases:
- AI Services: When using our chatbots, requests are forwarded to your chosen AI providers (OpenAI, Anthropic, Google). These are subject to their own privacy policies.
- Payment Providers: Stripe for billing purposes
- Hosting Provider: Our server host for technical provision
- Legal Requirement: In response to official requests
Cookies and Tracking
Our website uses the following types of cookies:
- Necessary Cookies: Required for website functionality
- Preference Cookies: Store your language settings
- Analytics Cookies: For website improvement (only with consent)
You can change your cookie settings at any time.
Your Rights
As a data subject, you have the following rights:
- Access (Art. 15 GDPR): Information about your stored data
- Rectification (Art. 16 GDPR): Correction of inaccurate data
- Erasure (Art. 17 GDPR): "Right to be forgotten"
- Restriction (Art. 18 GDPR): Restriction of processing
- Data Portability (Art. 20 GDPR): Export of your data
- Objection (Art. 21 GDPR): Objection to processing
- Complaint: To the data protection authority
Data Security
We implement the following security measures:
- SSL/TLS encryption for all data transfers
- AES-256 encryption for API keys
- Regular security updates
- Access controls and authentication
- Regular backups
International Data Transfer
When using AI services, data may be transferred to third countries (USA). We ensure that your data is adequately protected through standard contractual clauses and appropriate safeguards.
Changes to This Privacy Policy
We reserve the right to adapt this privacy policy as needed. The current version is always available on this page.
Last updated: February 2026