Privacy Policy

This policy explains what personal data AICNCT (Innovius UG (haftungsbeschränkt)) processes when you use our website and the AI Readiness Scan, and your rights under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Innovius UG (haftungsbeschränkt), Elbestraße 1A, 14513 Teltow, Germany. Data-protection contact: privacy@aicnct.com.

2. What we collect and why

• Scan requests. When you run a scan we process the website address you submit and your IP address (to prevent abuse and rate-limit). Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in providing and protecting the service.
• Email address. If you unlock a full report or create an account we store your email to send the report link, sign you in, and — if you ask for it — alert you when your grade changes. Legal basis: consent / performance of contract (Art. 6(1)(a)/(b)).
• The scanned site's public content. We fetch publicly available pages of the site you submit, the way any web crawler would, to produce the report. We do not access anything behind a login.
• Payment data. If you subscribe, payment is handled by Stripe; we never see or store your full card details. Stripe acts as a processor and, for tax, as an independent controller.

2.1 Connect setup enquiries

Fields and purpose. When the native Connect setup enquiry form is available, we store your organisation, name, contact email, one website address and optional message, together with an enquiry reference, timestamps and staff handling status. Staff use these details to review the supported integration and contact you about setup. Your email and website address are unverified; submitting the address does not fetch, connect or publish the site. This enquiry is not a purchase, activation, marketing permission or permission to train on customer data.

Private receipt and abuse protection. The necessary browser session protects the form and lets the same browser view its private receipt. A receipt confirms storage in the staff inbox, not email delivery or an appointment. Separate hourly limits apply to the browser session, supplied email and network address; a shared network address is not treated as a visitor identity. Rate counters use keyed hashes, and expired counters are removed when later requests are handled. The form and receipt omit pageview and advertising instrumentation and do not send their address as a navigation referrer.

Manual handling and removal. Staff review enquiries and record follow-up or closure in the inbox. Closing an enquiry does not erase its details. Details are retained while needed to handle the enquiry; you can request removal at privacy@aicnct.com. Removal of a closed enquiry’s live contact, website and message fields leaves its reference, closed status, timestamps and staff handling marker. This does not claim removal from backups, technical logs or abuse counters. There is no automatic fixed-period deletion for enquiries.

3. Who we share it with (processors)

We use a small number of service providers who process data on our behalf under contract: our hosting provider, our email-delivery provider, and Stripe (payments). We do not sell your data.

4. How long we keep it

Scan records and captured emails are retained while they are useful to you and to operate the service, and deleted or anonymized on request. Abuse-prevention logs are kept for a short period.

5. Your rights

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interest. To exercise any of these, email privacy@aicnct.com. You may also lodge a complaint with your data-protection authority.

6. Cookies

We use a single strictly-necessary session cookie to keep you signed in to your workspace. We do not use advertising or cross-site tracking cookies.

This document is provided for transparency and is not legal advice. Innovius UG (haftungsbeschränkt) will keep it current as the service evolves.