Privacy policy

Controller: [Name], [address], [email].

What we process and why

• Account data (email, name, author profile): to run your account and sign you in by email link. Legal basis: contract (Art. 6(1)(b) GDPR).
• Your briefs and generated products: to create the products you ask for. Stored until you delete them or your account. Legal basis: contract.
• Payment data: handled by Stripe Payments Europe Ltd (Ireland); we store only your customer id, plan and invoices metadata. Legal basis: contract and legal obligation (tax law).
• Usage logs (model, tokens, cost per generation): to meter credits and prevent abuse. Legal basis: legitimate interest (Art. 6(1)(f)).
• Server logs (IP address, time, requested page) for 14 days: security. Legal basis: legitimate interest.

Processors and transfers

• Anthropic PBC (USA) generates text from your brief under a Data Processing Addendum with EU Standard Contractual Clauses. Your briefs and generated text are sent to its API; Anthropic does not train on API data under its commercial terms.
• Stripe (payments), Resend (transactional email, EU region), Hetzner Online GmbH (hosting, Germany/Finland).

Cookies

Only strictly necessary cookies: a session cookie to keep you signed in and a CSRF token. No tracking cookies, no advertising cookies, so no consent banner is needed. We may use cookieless, aggregate analytics.

Your rights

Access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR), and the right to complain to a supervisory authority. You can delete your account and all products yourself under Account. For anything else write to [email].

Retention

Account and product data until deletion; invoices and payment records 10 years (German tax law); server logs 14 days.

AI-generated content

Products are generated with AI assistance from your inputs and are marked as such. They may contain errors; uncertain facts are flagged for your review. You are responsible for checking content before publishing it.