Privacy Policy
Last updated: August 2026
⚠ This is a standard template, not personalized legal advice. Before commercial use with real clients (especially from the EU, due to GDPR), we recommend a brief review by a qualified lawyer.
1. What data we collect
Data you provide:
- Email address and password (the password is stored hashed, never in plain text)
- SMTP data for sending email (host, username, App Password) - the password is stored encrypted in the database, never in plain text
- Sender name, account settings
Data the system automatically generates/collects:
- Business leads found (name, address, phone, email, website) - from publicly available sources (OpenStreetMap, Foursquare, Google Places)
- History of sent emails (so the same contact is never emailed twice)
- AI-generated demo websites (Studio plan) and their view statistics
2. How we use the data
- To provide the core functionality (search, email sending, autopilot)
- To generate AI content (email texts, demo websites) via the Anthropic Claude API
- For system emails (account confirmation, password reset) through our platform SMTP
- We never sell or share your personal data with third parties for marketing purposes
3. Third-party services we use
- OpenStreetMap / Foursquare / Google Places - for finding public business data
- Anthropic (Claude AI) - for generating email texts and demo websites. The prompts sent (which contain only public business data, not personal data about you) are sent to Anthropic for processing
- Your SMTP provider (e.g. Gmail) - for actually sending the emails, using your own credentials
4. Storage and security
- Account passwords are hashed (never stored in plain text)
- SMTP App Passwords are encrypted in the database (Fernet symmetric cryptography)
- Communication with the application is protected with HTTPS (SSL certificate)
- Data is stored on a server in Germany (Hetzner)
5. Your rights
- Access to your own data - through the app itself (Leads, Settings)
- Deletion of your account and all related data - contact us
- If you're in the EU, you have additional rights under GDPR (access, correction, portability, objection)
6. Data retention
We retain your data while your account is active. After account deletion, personal data is deleted within a reasonable timeframe, unless we are legally required to retain certain records.
7. Cookies
We use basic session cookies to keep you logged in. We do not use tracking cookies for advertising purposes.
8. Contact
Questions about privacy? Email us at webmatej00@gmail.com