Your data — clearly explained
Privacy here isn't a PDF nobody reads. This page explains, in plain language, what we collect, where it lives, who processes it and when it is deleted — so you can make an informed decision before working with us.
Four principles we hold to
Core systems in Europe
Our website and applications run on servers in Germany (Hetzner). European infrastructure is our default, not the exception.
No training on your data
The AI services we use do not use your inputs to train their models. Your content stays yours.
SCCs for every US transfer
Where specialized services are based in the US, the transfer is covered by Standard Contractual Clauses (Art. 46 GDPR).
Clear deletion windows
Contact data is automatically anonymized after at most two years. You can request early deletion at any time.
What we collect — and why
We only collect what a given feature actually needs:
Chat messages to our AI consultant "D"
To enable the conversation and handle your request. Tied to your conversation context.
Contact details (name, email, phone, company)
Only if you volunteer them — to prepare a quote and get back to you.
A website URL for analysis
If you provide a URL, its public content is processed temporarily — and not stored permanently.
Usage data (analytics)
Only with your consent (Google Analytics 4, IP-anonymized, Consent Mode v2). Without consent: no analytics cookies, no transfer.
Where your data lives
Our website and applications run on servers operated by Hetzner Online GmbH in Germany. A few specialized functions — database, AI processing, email delivery, bot protection — are provided by carefully chosen vendors, some of which are based in the US. Each of those transfers is covered by Standard Contractual Clauses. We don't hide this — we list every vendor in full below.
How our AI processes your data
Our AI consultant "D" uses Anthropic's Claude API to process your messages and respond. When used via the API, Anthropic does not train its models on your inputs.
For optional voice input we use OpenAI's Whisper API — audio is sent only for transcription and is not stored.
If you provide a company URL, its public content is analyzed via Google's Gemini API to prepare your conversation context. The URL and content are not stored permanently.
All transfers to the US rely on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
Your content does not train anyone's models
This matters enough to say twice: the AI services we use do not use the data you send via their API to improve their models. What you entrust to us does not flow into any AI provider's next training run.
Our processors — in full
Complete list of the vendors that process data on our behalf. Standard Contractual Clauses (SCCs) are in place with all US providers.
| Provider | Location | Purpose |
|---|---|---|
| Hetzner Online GmbH | DE | Website & application hosting (servers in Germany) |
| Cloudflare, Inc. | US | DNS, CDN and bot protection (Turnstile) |
| Supabase, Inc. | US | Database and authentication |
| Anthropic PBC | US | AI consultant "D" (Claude API) |
| Google Ireland / LLC | EU / US | Company analysis (Gemini) & web analytics (GA4, consent only) |
| OpenAI, Inc. | US | Optional voice input (Whisper API) |
| Resend, Inc. | US | Transactional email |
Standard Contractual Clauses (SCCs, Art. 46 GDPR) are in place with all US providers.
How long we keep data
Contact data is stored for at most two years after your consent and then automatically anonymized — conversation content is retained only in anonymous form for internal analysis. You can request early deletion at any time.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR) at any time, plus the right to withdraw consent. A message to datenschutz@domaniai.com is enough. All legal detail is in our privacy policy.
Data & security FAQ
Is my data in the EU?
Our website and applications run on servers in Germany. A few specialized services (e.g. database, AI) are provided by vendors based in the US — each transfer is covered by Standard Contractual Clauses. The full list is above.
Are my inputs used to train AI?
No. The AI services we use via their API do not train their models on the data you send.
Do you set tracking cookies?
Only with your explicit consent. We use Google Analytics 4 with IP anonymization and Consent Mode v2 (default: denied). Without consent, no analytics cookies are set and no data is transferred.
How quickly is my data deleted?
Contact data is automatically anonymized after two years at the latest. On request we delete your data earlier at any time — write to datenschutz@domaniai.com.
Still have questions about your data?
Write to us — we answer honestly and concretely, including on subprocessors, data processing and our deletion concept.
Get in touchOr ask D, our AI consultant, directly
I'm D.
Your personal AI consultant.
CLICK TO START