Legal

Privacy at a glance

Draft summary — the full GDPR privacy policy must be reviewed by counsel before launch. The existing product policy lives at growomat.com/privacy.html.

Controller

DefoAI UG (haftungsbeschränkt), Berlin, Germany · privacy@defoai.com

This website (defoai.com)

• Cookieless visit counting: we use Ahrefs Web Analytics, a service of Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03, Singapore 048581, to see how many people visit this site and which pages they read. It sets no cookies and stores nothing in your browser. For each page view it receives the page address and title, the page you came from, your browser language, your screen size, and your IP address. Ahrefs does not store the IP address: it is combined with your browser type and a random value that changes every 24 hours into a one-way hash used only to count unique visitors for that day, so you cannot be recognised from one day to the next or across websites. We do not receive personal data from this service. Legal basis: our legitimate interest in understanding the reach of this site (Art. 6(1)(f) GDPR). Ahrefs processes this data on our behalf under a data processing agreement; the data is stored in the United States on the basis of the EU Standard Contractual Clauses (2021/914/EU). You can object at any time (see “Your rights” below), and any content blocker that blocks analytics.ahrefs.com stops the measurement entirely.
• Ads measurement, only with your consent: if you allow it, we load the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It tells us whether an ad we ran on LinkedIn brought you here and which pages you then read. Unlike the visit counting above it stores and reads cookies on your device and sends LinkedIn the page address, the page you came from, your browser and device details, your IP address and, for LinkedIn members, an identifier that lets LinkedIn recognise you. LinkedIn may use that data for its own purposes, including its own advertising. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which we ask for before anything loads and which you can change at any time under Cookie settings in the footer of any page. Nothing is loaded and no cookie is set until you say yes, and declining costs you nothing on this site. Withdrawing stops any further loading; cookies LinkedIn has already set are removed through your browser or through LinkedIn's own opt-out. We and LinkedIn are joint controllers for the collection and transfer of this data (Art. 26 GDPR); LinkedIn's own privacy policy is at linkedin.com/legal/privacy-policy. Data may be processed in the United States on the basis of the EU Standard Contractual Clauses and LinkedIn's certification under the EU-US Data Privacy Framework.
• No other third-party trackers on this site, and nothing here is sold.
• Local storage: one value recording your answer to the measurement question above, so we do not ask again on every page. It never leaves your browser.
• Server logs: our hosting provider processes IP addresses in access logs for security and operation (Art. 6(1)(f) GDPR), deleted on a short rotation of [X days].
• Contact by email: if you write to us, we process your message to answer it (Art. 6(1)(b)/(f) GDPR).

Our products

Callomat (callomat.ai) and Growomat (growomat.com) have their own privacy policies covering calls, transcripts, ad-account access and payment data — linked in each product.

Your rights

Access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR), plus the right to complain to a supervisory authority — for Berlin: the Berliner Beauftragte für Datenschutz und Informationsfreiheit.