Privacy Policy

The controller within the meaning of the GDPR is the operator named in the legal notice (Impressum).

Contact for data protection requests: team@onecrew.dev

We take the protection of your personal data seriously. Personal data is collected on this website only to the extent technically necessary and processed in accordance with the GDPR and the German Federal Data Protection Act (BDSG).

Where we obtain consent, Art. 6(1)(a) GDPR serves as the legal basis.

Where processing is necessary for the performance of a contract or pre-contractual measures, Art. 6(1)(b) GDPR applies.

Where processing is necessary for our legitimate interests and your interests, fundamental rights and freedoms do not override those interests, Art. 6(1)(f) GDPR applies.

Our hosting provider automatically collects information in server log files (IP address — shortened where technically possible, date/time, transmitted data volume, browser type and version, operating system, referrer URL).

Legal basis: Art. 6(1)(f) GDPR. Storage serves the security and stability of the service. Data is deleted after a maximum of 30 days unless a security incident requires longer retention.

When you sign up for the beta we process the data you submit (name, email, optional phone, company, website, business type, size, revenue range, tools used, country, language).

Purpose: assessment and management of your beta application and related communication.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent via the checkbox in the form).

Retention: until you withdraw consent or the purpose ceases; statutory retention obligations remain unaffected.

This website currently uses only strictly necessary storage (e.g. localStorage for language and theme). No tracking or marketing cookies are set.

If non-essential cookies or tracking services are introduced in the future, we will obtain prior consent via a banner (Art. 6(1)(a) GDPR in conjunction with § 25 TDDDG).

Hosting is provided by our platform provider Lovable, which uses Cloudflare edge infrastructure.

Database and backend services are provided via Lovable Cloud (built on Supabase). We have entered into data processing agreements with our processors pursuant to Art. 28 GDPR.

Where personal data is transferred to third countries, this is done on the basis of appropriate safeguards (e.g. EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR).

Recipients of personal data are our processors (hosting, backend, AI model providers where AI features are provided). [FILL IN]

Where AI models are operated in the USA, transfers are based on EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

We store personal data only as long as necessary for the relevant purposes or as required by statutory retention periods.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR).

You may withdraw any consent at any time with effect for the future (Art. 7(3) GDPR).

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is that of the German federal state in which we are based: [FILL IN]

For data protection inquiries: team@onecrew.dev