1. Responsible Party

Responsible for data processing on this website:

2. General Information

The protection of your personal data is important to us. This Privacy Policy informs you about what personal data we collect, for what purposes it is used and what rights you have.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

3. Data Collection on this Website

3.1 Registration and Account

When registering for an account, we collect the following data:

• Name: For personalization and contact
• Email Address: For account verification and communication
• Password: Encrypted for authentication
• Registration Date: For managing your account

Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)

Retention period: Until account deletion or until the expiry of statutory retention periods.

3.2 API Usage and Logs

With every use of the API, the following data is automatically collected:

• User-ID: For assigning API calls
• API-Key-ID: For identifying the key used
• Endpoint: Which API endpoint was called
• Timestamp: Time of the API call
• Response Time: For performance analysis
• Status Code: Success or error of the call
• IP Address: For security purposes and abuse detection

Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance) and Art. 6 para. 1 lit. f GDPR (legitimate interest in system security)

Retention period: API logs are stored for 90 days and then automatically deleted.

3.3 Payment Data

When purchasing credits, payment data is processed through our payment service provider. We do not store full credit card data ourselves. Only the following information is stored:

• Transaction ID
• Invoice amount
• Time of the transaction
• Payment status

Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)

Retention period: According to legal retention obligations (7 years)

4. Cookies and Tracking

Our website uses cookies to improve functionality and user experience:

4.1 Necessary Cookies

These cookies are required for the basic functionality of the website:

• Session Cookie: For maintaining your login
• CSRF Token: For protection against cross-site request forgery attacks

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

4.2 Analytical Cookies (optional)

With your consent, we use analytics tools to improve our offering. You can object to the use at any time.

Legal Basis: Art. 6 para. 1 lit. a GDPR (consent)

5. Data Disclosure

We only disclose your personal data to third parties in the following cases:

• Payment service providers: For processing payments
• Hosting provider: For the operation of our servers (within the EU)
• Email service: For sending transactional emails
• Legal obligation: In case of an official order

All service providers have been carefully selected and are contractually obligated to comply with the GDPR. Data transfer to third countries outside the EU does not occur.

6. OAuth Login (Google)

When logging in via Google OAuth, the following data is transmitted from Google to us:

• Name
• Email Address
• Profile Picture (optional)
• Google User-ID

Data transmission occurs directly between you and Google. We only receive the information necessary for registration. Further information can be found in Google's Privacy Policy.

7. Your Rights

You have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You can request information about the data we process.
• Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to Erasure (Art. 17 GDPR): You can request the deletion of your data, provided there are no statutory retention obligations.
• Right to Restriction of Processing (Art. 18 GDPR): You can request the restriction of processing.
• Right to Data Portability (Art. 20 GDPR): You can receive your data in a structured format.
• Right to Object (Art. 21 GDPR): You can object to the processing of your data.
• Right to Withdraw Consent (Art. 7 para. 3 GDPR): Granted consents can be withdrawn at any time.

To exercise your rights, please contact us at: [email protected]

8. Data Security

We implement technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access:

• SSL/TLS encryption for all data transfers
• Encrypted storage of passwords (bcrypt)
• Regular security updates and backups
• Access restrictions to personal data
• Hosting in certified data centers in Austria/EU

9. Data Transfer to Third Countries

Your personal data will not be transferred to countries outside the European Union or the European Economic Area. All servers and service providers are located within the EU (primarily Austria and Germany).

10. Data Deletion

Your data will be deleted as soon as it is no longer required for the purposes for which it was collected. Exceptions apply to data subject to statutory retention periods (e.g., invoice data: 7 years).

You can delete your account at any time in the dashboard. After the deletion, all personal data will be completely removed within 30 days, provided there are no statutory retention obligations.

11. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

12. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy as needed to conform to changed legal situations or changes in our services. The current version is always available on our website. In case of significant changes, we will inform you via email.

13. Contact

For questions about data protection, you can contact us at any time:
Support: [email protected]