Privacy Policy

1. Controller

M. Amin Sayegh, trading as Prinvox (a product of AIProCraft), Paul-Bertz-Str. 38, 09120 Chemnitz, Germany, e-mail: hello@prinvox.com

2. What we process and why

Free website check: the website address and e-mail address you enter, a technical fetch of your website (home page, robots.txt, sitemap, structured data) and a hashed (non-reversible) value of your IP address for abuse and volume limiting. Purpose: performing the check and sending the result (Art. 6(1)(b) GDPR); abuse prevention (Art. 6(1)(f) GDPR).

Free AI check: the hotel name and city you enter are embedded in a query to an AI provider (Perplexity). No personal data of the user is transmitted.

Customer account: e-mail address (one-time sign-in codes, no passwords), account name, role, session data (cookie), details of your properties (name, website, city, federal state, type, optional address and description) and a log of key actions (audit events). Purpose: performance of the contract (Art. 6(1)(b) GDPR).

AI-visibility measurement: your property’s name, city, website domain and the alias spellings you store are embedded in queries to AI platforms (depending on plan: Perplexity, OpenAI, Google Gemini, Anthropic Claude, xAI Grok, Microsoft). The answers are stored as evidence. This is business data; no personal data of yours is transmitted.

Payment: subscriptions are processed by Stripe. Payment data (card, billing address) is collected by Stripe only; we receive a customer identifier, plan, status and term (Art. 6(1)(b) GDPR).

E-mails: sign-in codes and result notifications are sent via Resend. Recipient address, subject and delivery status are processed (Art. 6(1)(b) GDPR).

Server logs: when you visit the site, technically necessary data (IP address, time, page, browser) is processed briefly in our hosting provider’s logs (Art. 6(1)(f) GDPR – operational security).

3. Cookies and local storage

We use strictly necessary cookies only: a session cookie for signed-in users and a CSRF-protection cookie. There are no tracking, advertising or analytics cookies and no services requiring a consent banner.

The free AI check keeps your inputs and last result in your browser’s sessionStorage so they survive a language switch. This data never leaves your browser and is deleted when the tab is closed.

4. Recipients and processors

Hosting and database: Railway Corp. (USA). Domain/DNS: Cloudflare, Inc. (USA). Payments: Stripe Payments Europe, Ltd. (Ireland) / Stripe, Inc. (USA). E-mail delivery: Resend (USA). AI platforms for measurements: Perplexity AI, Inc.; OpenAI, L.L.C.; Google LLC; Anthropic, PBC; xAI Corp.; Microsoft Corporation (all USA) – they receive only the business data described in section 2, in the form of search queries.

Where data is transferred to third countries (in particular the USA), this is based on adequacy decisions (EU-US Data Privacy Framework, where the provider is certified) or the EU Standard Contractual Clauses.

5. Retention

Account data and measurement results are kept for the duration of the contract and deleted on request or at the latest 12 months after account closure, unless statutory retention duties (e.g. 10 years for invoicing data) apply. Free website-check results are deleted after 30 days. Server logs are deleted after 14 days at the latest.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Contact hello@prinvox.com.

You also have the right to lodge a complaint with a supervisory authority, e.g. the Saxon Commissioner for Data Protection and Transparency, Devrientstraße 5, 01067 Dresden, Germany.

7. Changes

We update this policy when our processing changes. The current version is always available on this page.