Privacy Policy

This policy explains what personal data AICNCT (Innovius UG (haftungsbeschränkt)) processes when you use our website and the AI Readiness Scan, and your rights under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Innovius UG (haftungsbeschränkt), Elbestraße 1A, 14513 Teltow, Germany. Data-protection contact: privacy@aicnct.com.

2. What we collect and why

• Visiting this website. Our hosting provider processes technical access data (IP address, requested page, user agent) in server logs to deliver the site and detect abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). This marketing site sets no cookies and uses no advertising or cross-site tracking.
• Scan requests. When you run a scan at app.aicnct.com we process the website address you submit and your IP address (to prevent abuse and rate-limit). Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in providing and protecting the service.
• Email address. If you unlock a full report or create an account we store your email to send the report link, sign you in, and — if you ask for it — alert you when your grade changes. Legal basis: consent / performance of contract (Art. 6(1)(a)/(b)).
• The scanned site's public content. We fetch publicly available pages of the site you submit, the way any web crawler would, to produce the report. We do not access anything behind a login.
• Payment data. If you buy an unlock or subscribe, payment is handled by Stripe; we never see or store your full card details. Stripe acts as a processor and, for tax, as an independent controller.

2.1 Connect setup enquiries

Fields and purpose. When the native Connect setup enquiry form is available, we store your organisation, name, contact email, one website address and optional message, together with an enquiry reference, timestamps and staff handling status. Staff use these details to review the supported integration and contact you about setup. Your email and website address are unverified; submitting the address does not fetch, connect or publish the site. This enquiry is not a purchase, activation, marketing permission or permission to train on customer data.

Private receipt and abuse protection. The necessary browser session protects the form and lets the same browser view its private receipt. A receipt confirms storage in the staff inbox, not email delivery or an appointment. Separate hourly limits apply to the browser session, supplied email and network address; a shared network address is not treated as a visitor identity. Rate counters use keyed hashes, and expired counters are removed when later requests are handled. The form and receipt omit pageview and advertising instrumentation and do not send their address as a navigation referrer.

Manual handling and removal. Staff review enquiries and record follow-up or closure in the inbox. Closing an enquiry does not erase its details. Details are retained while needed to handle the enquiry; you can request removal at privacy@aicnct.com. Removal of a closed enquiry’s live contact, website and message fields leaves its reference, closed status, timestamps and staff handling marker. This does not claim removal from backups, technical logs or abuse counters. There is no automatic fixed-period deletion for enquiries.

2.1 Connect-Einrichtungsanfragen

Angaben und Zweck. Wenn das native Formular für Connect-Einrichtungsanfragen verfügbar ist, speichern wir Ihre Organisation, Ihren Namen, Ihre Kontakt-E-Mail, eine Website-Adresse und Ihre freiwillige Nachricht sowie eine Anfragereferenz, Zeitstempel und den Bearbeitungsstatus des Teams. Das Team prüft damit die unterstützte Integration und kontaktiert Sie zur Einrichtung. E-Mail und Website-Adresse sind nicht verifiziert; das Absenden der Adresse lädt, verbindet oder veröffentlicht die Website nicht. Die Anfrage ist kein Kauf, keine Aktivierung, keine Werbeeinwilligung und keine Erlaubnis zum Training mit Kundendaten.

Privater Beleg und Schutz vor Missbrauch. Die notwendige Browser-Sitzung schützt das Formular und ermöglicht demselben Browser den Zugriff auf den privaten Beleg. Der Beleg bestätigt die Speicherung im Team-Posteingang, keine E-Mail-Zustellung und keinen Termin. Getrennte stündliche Grenzen gelten für die Browser-Sitzung, die angegebene E-Mail und die Netzwerkadresse; eine gemeinsam genutzte Netzwerkadresse gilt nicht als Besucheridentität. Die Begrenzungszähler verwenden schlüsselbasierte Hashes; abgelaufene Zähler werden bei späteren Anfragen entfernt. Formular und Beleg enthalten keine Seitenaufruf- oder Werbeinstrumentierung und senden ihre Adresse nicht als Referrer bei der Navigation.

Manuelle Bearbeitung und Entfernung. Das Team prüft Anfragen und vermerkt Rückmeldungen oder den Abschluss im Posteingang. Der Abschluss entfernt die Angaben nicht. Die Angaben bleiben gespeichert, solange sie zur Bearbeitung benötigt werden; Sie können die Entfernung unter privacy@aicnct.com anfordern. Bei der Entfernung der Kontakt-, Website- und Nachrichtenfelder einer geschlossenen Anfrage bleiben Referenz, geschlossener Status, Zeitstempel und der Bearbeitungsvermerk des Teams erhalten. Dies behauptet keine Entfernung aus Sicherungskopien, technischen Protokollen oder Missbrauchszählern. Für Anfragen gibt es keine automatische Löschung nach einer festen Frist.

3. Who we share it with (processors)

We use a small number of service providers who process data on our behalf under contract: our hosting providers, our email-delivery provider, and Stripe (payments). We do not sell your data.

4. How long we keep it

Scan records and captured emails are retained while they are useful to you and to operate the service, and deleted or anonymized on request. Abuse-prevention logs are kept for a short period.

5. Your rights

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interest. To exercise any of these, email privacy@aicnct.com. You may also lodge a complaint with your data-protection authority.

6. Cookies

This marketing site sets no cookies. The app at app.aicnct.com uses a single strictly-necessary session cookie to keep you signed in to your workspace. We do not use advertising or cross-site tracking cookies.

7. Alexa skill “ai connect” and per-business skills

Innovius UG (haftungsbeschränkt) operates the shared Alexa skill “ai connect” and the Alexa skills it publishes for individual businesses. When you ask one of these skills a question, we process:

• Your spoken request, as text. Alexa passes us what you asked as text, and we use it only to answer it from the business's own published information. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in answering the question you asked.
• Your Alexa user id, only as a one-way hash. We use a one-way hash of the Alexa user id to rate-limit requests. It is not stored with your requests and cannot be turned back into your Alexa user id.
• Nothing else from your Amazon account. The skills use no account linking, and nothing can be bought through them — there are no purchases by voice.

Amazon provides Alexa and processes your voice and your Amazon account under its own privacy notice. The operator of the AICNCT skills is Innovius UG (haftungsbeschränkt); contact us about them at privacy@aicnct.com.

This document is provided for transparency and is not legal advice. Innovius UG (haftungsbeschränkt) will keep it current as the service evolves.