Privacy policy

1. Controller and contact

The controller is Benjamin Hellmich, getAdvantage.

Griesheimer Stadtweg 51, 65933 Frankfurt am Main

For privacy questions and deletion requests, contact hello@getadvantage.app. Further provider details are in our legal notice.

2. Hosting and server logs

Vercel Inc., USA, hosts this website. Our server functions are configured for Frankfurt. Requests involve technical connection data such as IP address, time, requested page, browser information and error details. These data support delivery, security and troubleshooting, based on our legitimate interest in operating a secure service under Art. 6(1)(f) GDPR.

Logs follow the retention configured with the hosting provider and are used for troubleshooting for as long as needed to investigate an issue.

3. Database

We use a PostgreSQL database from Neon. Its region depends on the Neon configuration for this website and is separate from the hosting server region. It processes the pilot call requests, release registrations and saved product demo input and progress described below.

4. Release interest

The form asks for your name, company, industry and business email address. Role and message are optional. We also store your language, consent wording version and time, registration and confirmation times, and delivery status. We use these details to manage your registration and inform you about the release, based on your consent under Art. 6(1)(a) GDPR.

You confirm your email address using a signed link valid for 48 hours. We use Resend, USA, for this confirmation and to forward your confirmed details internally to the operator when sending is enabled. After confirmation, a necessary browser cookie records the confirmation status for five minutes.

We retain confirmed registrations until you withdraw consent or the release notification is complete. We handle deletion manually. You can withdraw consent at any time by emailing hello@getadvantage.app. Withdrawal does not affect the lawfulness of earlier processing. Unconfirmed registrations older than 30 days are deleted on the next release registration.

To prevent spam, we keep a keyed IP hash and a request counter for 15 minutes. This form protection does not store the raw IP address. Expired entries are removed on the next request, based on Art. 6(1)(f) GDPR.

5. Interactive product demo

A signed, technically necessary cookie links your progress to your browser. It contains a visitor identifier, lasts 24 hours and is renewed during continued use. The database stores submitted questions and answers, approvals, actions, notes, tasks, corrections, confirmed memories and associated times. Progress is separated by visitor, area and open scene.

“Restart demo” deletes saved events and associated system state for the current scene. Other scenes, technical revision records, usage accounting and browser data remain. Cookie expiry does not delete database records. These records have no automatic time limit for deletion; you can request deletion at hello@getadvantage.app.

The photo function sends only an image identifier calculated locally. Confirmed photo fields are saved with your progress. Images attached to notes remain in your browser.

Processing supports the interactive use you request and its secure operation, based on Art. 6(1)(f) GDPR. Technically necessary cookies and storage access rely on § 25(2)(2) TDDDG.

6. AI answers and voice input

When live answers are enabled and you submit a question, OpenAI processes your question, relevant conversation context, source excerpts and confirmed memories to generate an answer. Personal data are not required. Please do not enter sensitive information or other people’s personal data. Your input is not automatically anonymised.

Optional voice input requires microphone permission. When enabled, speech recognition sends the recording to OpenAI for transcription. We do not persist that recording; the recognised text can become part of the conversation history. Processing supports the function you choose under Art. 6(1)(f) GDPR.

OpenAI has entities in the United States and Ireland. Processing in the United States is possible. For text answers, we disable response storage with the API store parameter; the provider may still retain security and abuse monitoring records.

7. Cookies and browser storage

A normal page load sets no analytics or advertising cookies and loads no analytics service. On links carrying a source tag, the session cookie adv_src may record the visit’s source. We use it for basic source attribution without building a profile across websites, based on Art. 6(1)(f) GDPR.

The product demo adds necessary visitor and usage limit identifiers. Your browser can also retain language, appearance, introduction preferences, read conversation entries and local note images and input drafts. You can delete these website data in your browser settings. Restarting a scene does not remove them.

8. Contact and feedback

When you contact us or submit feedback, we process the details and content you send to handle your request. Feedback may include screen context, technical details, text and optional voice recordings. Stored feedback has no automatic deletion period. You can request deletion by email. Our legitimate interest in responding and improving the service is the basis under Art. 6(1)(f) GDPR.

9. Providers and international processing

The providers named above process data for the purposes described. Their data protection terms provide for safeguards for processing outside the European Economic Area, including EU Standard Contractual Clauses or an applicable adequacy decision. You can ask us for details about recipients and safeguards and consult the providers’ information:

Vercel, Neon, Resend, OpenAI.

10. Your rights

Under Arts. 15 to 21 GDPR, subject to the applicable conditions, you have rights of access, rectification, erasure, restriction and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. You can withdraw consent at any time for the future. Contact hello@getadvantage.app.

Under Art. 77 GDPR you can also complain to a data protection supervisory authority, particularly where you live, work or believe an infringement occurred.

11. Automated decisions

We do not make automated decisions, including profiling, with legal or similarly significant effects under Art. 22 GDPR. The crew prepares information and suggestions; you retain approval.