Privacy Policy

Last updated: January 2026

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The contact details can be found in the imprint of this website.

How do we collect your data?

Your data is collected in part by you providing it to us. This can be, for example, data that you enter in a contact form.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This is mainly technical data (e.g., internet browser, operating system, or time of page access).

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior and to provide and improve our services.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time. You also have the right to request restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

We host our website with the following provider:

Vercel

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

For details, please refer to Vercel's privacy policy: https://vercel.com/legal/privacy-policy

Supabase

We use Supabase for our database and authentication services. Supabase is provided by Supabase Inc.

For details, please refer to Supabase's privacy policy: https://supabase.com/privacy

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Responsible Party

The responsible party for data processing on this website is:

Lorenz Schäfer
Auerfeldstr. 20
81541 München
Deutschland
Phone: +49160 6271848
Email: lb_schaefer@icloud.com

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will take place after these reasons no longer apply.

Legal Basis for Data Processing

We process your personal data only if we have a legal basis to do so. The legal bases are primarily:

  • Your consent (Art. 6 para. 1 lit. a GDPR)
  • Contract fulfillment (Art. 6 para. 1 lit. b GDPR)
  • Legal obligation (Art. 6 para. 1 lit. c GDPR)
  • Legitimate interests (Art. 6 para. 1 lit. f GDPR)

Right to Withdraw Consent

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection

If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

4. Data Collection on This Website

Account Registration

When you register for an account, we collect:

  • Name
  • Email address
  • Password (encrypted)

This data is necessary to provide you with access to our platform and its features. The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment).

Workspace Data

When you create and use workspaces, we process:

  • Workspace names and settings
  • Projects and deliverables
  • Files and media you upload
  • Comments and feedback
  • Team member information

This data is processed to provide the service. The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment).

Payment Data

For paid subscriptions, we use Stripe for payment processing. We do not store your credit card information ourselves. Stripe processes:

  • Payment information (credit card, etc.)
  • Billing address
  • Transaction history

For details, see Stripe's privacy policy: https://stripe.com/privacy

Server Log Files

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. These are:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interests in ensuring the technical operation of the website).

Contact Form and Email Contact

If you contact us via email or contact form, we will store the data you provide (email address, name, message) to process your inquiry. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries).

Demo Workspace Access

If you want to try our demo workspace, we collect the following data:

  • Email address (required)
  • Time of consent
  • IP address and user agent (for documentation purposes)

Purpose: We process your email address to provide you access to the demo workspace. The legal basis is your consent under Art. 6 para. 1 lit. a GDPR.

Storage duration: Your data is stored until you withdraw your consent or request deletion.

Newsletter / Marketing Communication (Double Opt-In)

When accessing the demo workspace, you have the option to subscribe to our newsletter. We use the double opt-in procedure:

  1. You give your consent by checking the corresponding checkbox.
  2. You receive a confirmation email with an activation link.
  3. Your subscription is only activated after clicking this link.

The legal basis is your consent under Art. 6 para. 1 lit. a GDPR.

Unsubscribe: You can withdraw your consent and unsubscribe from the newsletter at any time. Every email contains an unsubscribe link. Alternatively, you can contact us directly.

Storage duration: Your email address is stored until you unsubscribe. After unsubscribing, we store the unsubscribe timestamp for documentation purposes.

5. File Storage

Bunny CDN

We use Bunny CDN for storing and delivering media files. Files you upload are stored on Bunny CDN's servers. For details, see Bunny CDN's privacy policy: https://bunny.net/privacy

6. Third-Party Services

Google OAuth

If you choose to sign in with Google, we use Google OAuth for authentication. Google will share your basic profile information (name, email) with us. For details, see Google's privacy policy: https://policies.google.com/privacy

7. Your Rights

You have the following rights regarding your personal data:

  • Right to access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 para. 3 GDPR)

To exercise these rights, please contact us at: lb_schaefer@icloud.com

8. Data Security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

9. Data Transfer to Third Countries

Some of our service providers are located outside the European Economic Area (EEA). In these cases, we ensure that appropriate safeguards are in place (e.g., EU Standard Contractual Clauses or adequacy decisions).

Contact

If you have any questions about this privacy policy or data protection, please contact:
Email: lb_schaefer@icloud.com
Phone: +49160 6271848

Note: This privacy policy provides a foundation and should be reviewed by a specialist lawyer and adapted to your specific services and data processing practices.