vlowr.ai
← Zurück zu vlowr.ai

Privacy Policy

Deutsche Version →
⚠ This text is currently under legal review and does not constitute a legally binding agreement.
Questions: hello@vlowr.ai

vlowr.ai · Oliver Tesch · Last updated: June 2026 · Version 1.1 Draft

§ 1 Controller

Oliver Tesch · vlowr.ai
c/o Online-Impressum #7955 · Europaring 90 · 53757 St. Augustin · Germany
Email: hello@vlowr.ai

§ 2 Data Collected and Purpose of Processing

2.1 When visiting the website (vlowr.ai)

The website is hosted via Netlify. When accessed, Netlify automatically processes connection data (IP address, timestamp, page accessed) for operational purposes. vlowr.ai does not store or evaluate this data itself.
Netlify Privacy Policy: https://www.netlify.com/privacy/

2.2 When using the platform (app.vlowr.ai)

The following data is processed upon registration and use of the platform:

  • Email address and name (registration)
  • Process data and company information (entered by the customer)
  • Usage log (actions on the platform, audit trail)

Purpose: Contract performance. Legal basis: Art. 6(1)(b) GDPR.

2.3 AI Processing

To perform AI-assisted analyses, process content is temporarily transmitted to Anthropic PBC (USA) and processed there. No permanent storage takes place. Anthropic does not train models on API customer data (Zero Data Retention Policy).
Legal basis: Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
Anthropic Privacy Policy: https://www.anthropic.com/privacy
Anthropic DPA: https://www.anthropic.com/legal/data-processing-addendum

§ 3 Hosting and Infrastructure

  • Platform data: Supabase Frankfurt (AWS eu-central-1, Germany)
  • AI processing: Anthropic PBC, USA (transient, Zero Data Retention)
  • Speech transcription: OpenAI Whisper, USA (transient, voice input only)
  • Email delivery: Brevo SAS, France (EU-hosted, GDPR-compliant)
  • CDN / DDoS protection: Cloudflare Inc., USA (IP metadata, SCCs)
  • Website hosting: Netlify Inc., USA (connection data, SCCs)

§ 4 Sub-Processors

The provider uses the following sub-processors. Customers are notified of changes with 30 days' advance notice.

ProviderHeadquartersPurposeLegal Basis
Supabase Inc.USA (Hosting: EU Frankfurt)Database hosting, authenticationSCCs; data stays in EU
Anthropic PBCUSAAI analysis (transient)SCCs + Anthropic DPA
OpenAI OpCo LLCUSASpeech transcription (transient, optional)SCCs + OpenAI DPA
Brevo SASFranceEmail deliveryEU provider
Cloudflare Inc.USACDN, DDoS protectionSCCs + Cloudflare DPA

§ 5 Data Processing Agreement

The provider processes personal data on behalf of customers in accordance with a Data Processing Agreement (DPA). A template is available at vlowr.ai/avv.

§ 6 Retention Period

Personal data is deleted as soon as it is no longer required for its processing purpose, at the latest upon contract termination and expiry of statutory retention periods (generally 10 years for accounting records).

§ 7 Rights of Data Subjects

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).
To exercise your rights: hello@vlowr.ai

§ 8 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. Competent authority: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

§ 9 Cookies

The website does not use tracking cookies. Technically necessary cookies (session) are used exclusively for the functionality of the platform.

§ 10 Changes

The current version is always available at vlowr.ai/privacy.

vlowr.ai · Privacy v1.1 Draft · June 2026 · Draft – pending legal review
Impressum·hello@vlowr.ai·© 2026 vlowr.ai