Convenience translation for information purposes only. The legally binding version is the German original („Datenschutzerklärung", privatai.com/datenschutz). In case of any discrepancy, the German version prevails.
Version: July 2026
Responsible for data processing on this website:
Artur Parutkin, Isestraße 35, 20144 Hamburg, Germany Email: datenschutz@privatai.com
Each time our website is accessed, the following data is automatically processed temporarily:
In addition, the web server keeps technical access logs containing the IP address in plain text. These logs serve exclusively security and malfunction analysis (Art. 6 (1) lit. f GDPR) and are deleted automatically after 14 days.
When you use our API or the chat, the following data is processed:
Your prompts (inputs) and the AI responses (outputs) are not stored. They are processed only for the duration of the request and discarded afterwards; they are not logged, not used for training AI models, and not accessible to model providers or other third parties.
Narrow security exception: In the event of detected malicious activity or of disruptions to service quality, the inference data centre (Scaleway) may temporarily retain the content of individual requests for root-cause analysis (in accordance with the Scaleway terms for AI services). Even in that case, there is no use for training and no access by third parties.
When you take out a paid subscription, your payment data is processed exclusively by our payment service provider Stripe. We receive from Stripe only a confirmation of payment, but no credit card data.
To create and manage your account, we process your email address. Login is passwordless via a magic link sent by email (a short-lived, single-use login token). The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures). For sending emails we use the service provider Resend (see Section 8.2).
Data processing takes place on the following legal bases:
You have the following rights regarding your personal data:
To exercise these rights, contact us at datenschutz@privatai.com or at the address given in the legal notice (Impressum).
You have the right to complain to a data protection supervisory authority about the processing of your personal data. The supervisory authority responsible for us is:
The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) Ludwig-Erhard-Straße 22, 7th floor, 20459 Hamburg, Germany Phone: +49 40 428 54-4040 · Email: mailbox@datenschutz.hamburg.de · Web: datenschutz-hamburg.de
All data remains in the EU. The application runs on servers in Germany (Hetzner, Falkenstein); AI processing takes place in France (Scaleway). Operation of the AI inference in a German data centre is available as part of the Enterprise setup.
We use Stripe for payment processing. The contracting party within the EU is Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). To the extent that data is transferred to the US parent company Stripe, Inc., this is safeguarded via the EU-US Data Privacy Framework (Stripe, Inc. is certified) and EU Standard Contractual Clauses (Art. 46 (2) lit. c GDPR). The legal basis for the processing is Art. 6 (1) lit. b GDPR (performance of a contract). Further information can be found in Stripe's privacy policy.
Apart from that, no personal data is transferred to third countries; app hosting (Germany) and AI processing (France) take place exclusively within the EU.
For sending emails (e.g. login/magic links, notifications and – with consent – the newsletter) we use the service Resend (Plus Five Five, Inc.). Email processing takes place in the EU region (data centres in Ireland). The data processed comprises your email address, your name where applicable, and the content of the respective email.
As the provider is a US company, any potential access from the USA is safeguarded via EU Standard Contractual Clauses (Art. 46 (2) lit. c GDPR) and a data processing agreement (Art. 28 GDPR). Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract) or Art. 6 (1) lit. a GDPR (consent for the newsletter).
A complete and always current list of our sub-processors – including Hetzner (hosting, Germany) and Scaleway (AI inference, France) – can be found at privatai.com/unterauftragsverarbeiter. For business customers, our Data Processing Agreement additionally applies (privatai.com/avv).
We use exclusively technically necessary cookies that are strictly required for operating the website. These cookies do not require consent (Art. 6 (1) lit. f GDPR; Section 25 (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG)).
Session cookie — Name: session · Purpose: authentication after login (magic link) · Storage period: 30 days or until logout · Type: essential / technically necessary
We do not use tracking cookies, analytics cookies or marketing cookies. For anonymized visit statistics we use GoatCounter (see Section 11).
If you sign up for our newsletter with your consent, we use your email address exclusively to send you product and news emails. The sending frequency is at most once per month.
On selected pages we use the open-source tool GoatCounter to collect anonymized visit statistics (e.g. views per page). GoatCounter is self-hosted by us (stats.privatai.com) and designed to be privacy-friendly:
The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in analysing the use of our website). Further information: goatcounter.com.
We amend this privacy policy when changes in the law or changes to our service require it. The version published on this page at the relevant time applies.