← Back to home

Privacy Policy

1. Controller

Livius Despang, Am Seegraben 22, 01139 Dresden, Germany, email: livius.despang@icloud.com

2. Waitlist

When you join our waitlist, we store your email address, the language you selected and the time of sign-up. You will then receive a confirmation email: you are only on the waitlist once you click the link it contains (double opt-in). Without that confirmation we will not send you any further messages. As proof of consent we also record the time of the confirmation and a pseudonymized hash of the IP address used for it (no plain-text IP). The legal basis is Art. 6(1)(a) GDPR (consent); for the record of consent additionally Art. 6(1)(f) GDPR in conjunction with the obligation to demonstrate consent under Art. 7(1) GDPR. We use the data solely to inform you about the launch and development of AERAVIA. The data is stored until you withdraw your consent or the purpose no longer applies. You can withdraw your consent at any time by an informal email to livius.despang@icloud.com; your data, including the records of consent, will then be deleted.

3. Live demo

When you use our live demo, we process your email address and the company and project details you enter (Art. 6(1)(a) and (b) GDPR) in order to perform the AI matching and draft the application, to limit abuse, and to inform you about AERAVIA. To generate the results, the project and company details (company name, website, location, etc.) — without your email address — are transmitted to Anthropic PBC (Claude API, USA); this may trigger an automated web search in which the company name or website reaches a search engine via the search tool. Anthropic does not use inputs submitted via the API to train its models by default. Please do not enter confidential information or third parties' personal data into the description. To limit abuse, we also store a pseudonymized hash of your IP address (no plain-text IP) and your email address as usage counters. The results are generated automatically and do not constitute legal or tax advice.

4. Hosting

This website is hosted by Vercel Inc. (USA). Waitlist and live-demo data are stored with Supabase in a data centre within the EU. Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.

5. Payment processing

For paid offerings in the console area (credit packages) we use Stripe as our payment service provider; the contracting party is then Stripe Payments Europe, Ltd. (Ireland), which in turn relies on Stripe, Inc. (USA). When you buy a package, Stripe acts as a processor for the customer and invoicing data required for it (name, billing address, email address, payment method and amounts) on the basis of Art. 6(1)(b) GDPR (performance of a contract) and a data processing agreement pursuant to Art. 28 GDPR. The payment itself then runs on a page hosted by Stripe: payment details such as card numbers are entered there directly and never reach our servers. Invoice history, payment methods and billing address are subsequently managed in Stripe's customer portal.

6. Transfers to third countries (USA)

Vercel Inc. and Anthropic PBC are located in the USA, as is Stripe, Inc. for payment processing, so personal data is transferred to a third country. The transfer is based on the EU-US Data Privacy Framework or on the EU Standard Contractual Clauses (Art. 44 et seq. GDPR). Despite these safeguards, access by US authorities cannot be fully ruled out.

7. Retention period

We store personal data only for as long as necessary for the respective purpose. Waitlist data, including the records of consent, is kept until you withdraw consent; the details collected in the demo (email and project information) are deleted once the purpose no longer applies or at your request. The usage counters contain only a pseudonymous IP hash and the email address, are limited to what is necessary to prevent abuse, and are cleaned up regularly.

8. Server log files

When the website is accessed, technically necessary data (IP address, time, page requested, browser) is processed in server log files (Art. 6(1)(f) GDPR). This data is not merged with other data sources.

9. Cookies & analytics

This website uses no tracking cookies, no analytics cookies and no third-party reach measurement. There is no cross-device tracking and no creation of personal user profiles. We only set cookies where they are technically necessary — for example to sign you in to your account.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).