Privacy Policy

Last updated: 1st of June 2025
Responsible Entity:
Hamburg AI Agent

Eichendorffstraße 8
22869 Schenefeld, Germany
info@hamburg-ai-agent.com

1. General Information
We take the protection of your personal data very seriously. This privacy policy explains how we collect, process, and use personal data when you use our website and services.

The legal basis for processing your data is the EU General Data Protection Regulation (GDPR).

2. Data We Collect
We process the following personal data:

a) When visiting the website

IP address
Date and time of access
Browser and operating system
Referrer URL (if applicable)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website security and improvement)

b) When registering an account

Username
Email address
Password (hashed, not stored in plain text)
Legal basis: Art. 6(1)(b) GDPR (contract fulfillment)

c) When subscribing via Stripe

Email
Billing address (Stripe collects this)
Payment data (processed by Stripe, not stored on our servers)

Legal basis: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (legal obligations)

Stripe Privacy Policy: https://stripe.com/privacy

d) When using the WhatsApp bot

WhatsApp number you connect
Messages from unknown contacts (processed to generate automatic replies)
Configuration data you enter (e.g., working hours, timezone, prompts)

Legal basis: Art. 6(1)(b) GDPR (contract fulfillment)

e) Cookies and Local Storage

We use localStorage in your browser to store your login token (JWT)
No tracking or marketing cookies are used

Legal basis: Art. 6(1)(f) GDPR

3. Purpose of Processing
We use your data to:

Provide and operate the WhatsApp automation platform
Manage subscriptions and billing
Authenticate users (via secure tokens)
Prevent abuse and enhance security
Offer customer support

4. Data Recipients
We may share data with:

Stripe (payment processing)
Hosting providers (for server infrastructure)
Authorities if legally required

We do not sell or share your data with advertisers or third-party marketers.

5. Data Retention

Account data is retained for as long as you have an active subscription
WhatsApp configuration and logs are deleted upon request or account deletion
Invoices and billing data are stored for 10 years per German tax law

6. Your Rights (Art. 15–21 GDPR)
You have the right to:

Access your personal data
Rectify incorrect data
Request deletion ("right to be forgotten")
Restrict or object to processing
Data portability
File a complaint with a supervisory authority

For any request, contact: info@hamburg-ai-agent.com

7. Hosting & Security
Your data is stored on secure servers within the European Union. We use HTTPS encryption and industry-standard safeguards.

8. Changes to This Policy
We may update this Privacy Policy to comply with new regulations or to reflect service changes. The latest version is always available on our website.