Privacy

Draft — provider details and actual data processing must be verified and completed before production use.

Controller

Operator, address and privacy contact are still to be supplied. This draft does not replace an assessment of the actual processing under the GDPR.

Prototype and sample data

Projects, tasks, configuration and conversation history are held in the open application's memory. The application does not persist these changes; reloading restores sample data. This does not describe hosting or AI-provider logs. Do not enter real confidential or personal data.

Hosting and technical logs

Visiting the site sends technical connection data such as IP address, time, browser information and requested resources to the hosting provider. The application includes technical error reporting. Providers, recipients, legal bases, retention periods and any international transfers must be specified before production use.

AI assistant

Sending a message transmits that message, the conversation history used for the response and a project snapshot filtered by the selected demo role to the AI service. Role switching is not real access security in this prototype. Providers, processing agreements, retention, legal basis and any international transfers remain to be verified. The application does not persist conversations; this is not a promise about the provider's retention.

External fonts

Fonts load from Google Fonts, which receives technical connection data including your IP address. Provider details, legal basis and any required consent must be reviewed before production use.

Cookies and consent

The application does not use its own persistent browser storage for demo data. Additional cookies or similar technologies used by the hosting environment require separate verification. Where consent is required, it must be obtained before processing.

Your rights

Subject to applicable legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests and withdraw consent for future processing. You may also complain to a data protection authority. The relevant contact and authority still need to be added.