Privacy Policy

Last updated: 11 October 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection provisions is:

A separate company Data Protection Officer has currently not been appointed. Data protection inquiries may be addressed directly to the controller using the contact details above.

2. General Information on Data Processing

We process personal data only to the extent necessary for operating our website, providing our products and services, processing orders and contracts, licensing AI Chat 2026, providing support, safeguarding legitimate security interests, or where the relevant consent has been provided.

Depending on the processing activity, data processing is based in particular on the following legal bases:

• Art. 6(1)(a) GDPR – consent
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – compliance with legal obligations
• Art. 6(1)(f) GDPR – legitimate interests

Where information is stored on or accessed from the end user's device, the lawfulness of such processing is additionally governed by the applicable provisions of the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting and Email

Our website and the associated email services are operated by ALL-INKL.COM – Neue Medien Münnich .

When our website is accessed, the following technical data in particular may be processed:

• IP adress
• date and time of access
• requested page or file
• referrer URL
• operating system
• operating system
• amount of data transferred
• access status
• technical connection information

This data is required in particular to technically deliver the website, detect attacks, analyse errors, and ensure secure operation.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically error-free operation of our website.

4. Encrypted Transmission

Our website uses HTTPS/TLS encryption.

This protects content transmitted between your browser and our web server against unauthorised interception during transmission.

5. Cookies and Consent Management

Our website uses technically necessary cookies and, depending on your consent, additional cookies and comparable technologies.

We use Complianz | GDPR/CCPA Cookie Consent to manage your consent preferences. Compliance | GDPR/CCPA Cookie Consent.

When you first visit our website, you can choose which categories of cookies and services you consent to. You may change or withdraw your decision later via the website's cookie settings.

Strictly necessary cookies may also be set without consent where they are required for operating the website, shopping cart, login, security, or other functions explicitly requested by the user.

Non-essential analytics and tracking technologies are generally activated only after the relevant consent has been given.

The legal basis for essential technologies is Art. 6(1)(f) GDPR and, for technologies requiring consent, Art. 6(1)(a) GDPR.

6. WordPress

Our website is based on the content management system WordPress.

WordPress processes technically necessary data for displaying the website, user accounts, sessions and administrative functions.

For registered users, cookies may be set that are necessary for login, session, security and user preferences.

7. WooCommerce

For our online shop we use WooCommerce.

When placing an order, the following personal data may be processed in particular:

• First and Last Name
• Billing address
• E-mail address
• Telephone number (if applicable)
• ordered products
• Order number
• Order time
• Order status
• Billing and payment information
• IP adress
• User account, if created
• Technical information regarding the order process

We need this data to execute the purchase agreement, for invoicing, for providing licenses and downloads, and for legal documentation and retention obligations.

The legal basis is Article 6(1)(b) GDPR. Where tax or commercial law retention obligations exist, storage is additionally based on Article 6(1)(c) GDPR.

8. Germanized for WooCommerce

To adapt our WooCommerce shop to the requirements of the German market, we use Germanized for WooCommerce.

The plugin primarily supports legal and technical functions of the ordering process. The information processed is essentially the same as the data processed during a WooCommerce order.

9. Customer account

Customers can create a user account on our website.

The following can be processed in particular:

• name
• E-mail address
• user name
• encrypted password
• Invoice data
• Order history
• License information
• Information on existing activations
• technical session information

WordPress does not store the password in plain text.

The processing is used to manage the customer account, orders, licenses, downloads and support processes.

10. Premium Customer Login and Multi-Factor Authentication

We use a separate login solution for customer and administrator accounts for AI Chat 2026.

Multi-factor authentication (MFA/TOTP) can be used for particularly secure accounts.

• user name
• E-mail address
• Login time
• technical session information
• Information about successful or failed login attempts
• MFA configuration data
• cryptographic recovery information

The processing serves to protect customer accounts and administrative areas.

11. Jetpack

We use Jetpack, a service provided by Automattic.

11.1 Brute-force protection

Jetpack is used to protect the website against automated attacks and brute-force attacks.

• IP adress
• Username or entered email address
• HTTP headers
• User-Agent
• failed login attempts

The legal basis is Article 6 paragraph 1 letter f GDPR.

11.2 Jetpack Stats / Analysis

If Jetpack Stats is enabled, the following data in particular can be processed:

• IP adress
• URL accessed
• Referrer
• User-Agent
• Time of access
• Browser language
• Country code
• WordPress.com user information (if applicable)
• Clicks on outgoing links
• Search terms and page views

Insofar as the analysis function requires consent, it will only be activated via our consent management system after appropriate consent has been given.

12. Payment via WooPayments / Stripe

For card payments, we use WooPayments and the payment processing integrated therein via Stripe.

• name
• E-mail address
• Billing address
• Telephone number (if applicable)
• Order total
• currency
• Order information
• Payment information
• IP adress
• unique payment identifiers
• Information on fraud prevention

Card numbers and security codes are not stored on our own web server, but are processed within the payment infrastructure.

The processing is carried out for the performance of the contract in accordance with Art. 6 para. 1 lit. b GDPR and, insofar as fraud prevention is concerned, on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.

13. Licensing of AI Chat 2026

After a purchase, a license can be created and managed for AI Chat 2026.

For this purpose, we use our own licensing infrastructure, including a separate RegServer.

• Customer or WooCommerce ID
• E-mail address
• Product or edition
• License status
• License identifier
• Activation status
• Times of activations and deactivations
• technical activation data
• Device or installation identifiers, if applicable
• Log data for abuse and error analysis

Cryptographic tokens and similar security information are used exclusively for technical authorization and are processed server-side.

14. Offline Activation

AI Chat 2026 may also support offline activation.

An activation request can be generated and processed via the customer account or the functions provided for this purpose.

15. Secure software download

We use a dedicated secure download system for downloading AI Chat 2026.

A time-limited download token will be generated upon a legitimate request.

• E-mail address
• Name, if available
• Relation to the product or license
• cryptographic token or its hash value
• Time of creation
• Expiry date
• Download status
• Time of a download
• possibly IP address and technical log data

The download tokens are time-limited and, depending on the configuration, can only be used once.

16. Integrity check of downloads

For provided installation files, a SHA-256 checksum published or made available via email.

The verification value allows you to check whether the downloaded file has been modified compared to the original file provided.

17. Contact via email

When you contact us by email, we process the data you provide.

• name
• E-mail address
• Message content
• Date and time
• Technical email metadata
• If applicable, order, license or support information

18. Order and transaction emails

We may send automated emails in connection with orders, licenses, or downloads.

• Order confirmations
• Payment information
• License information
• Download links
• safety-related information
• Customer account information

These messages are part of fulfilling the contract and are not promotional newsletters.

19. Newsletters and marketing emails

Currently, no general marketing newsletter is operated via an external newsletter service.

Should a newsletter be introduced in the future, this privacy policy will be amended accordingly.

20. Social Media Tracking

The website currently does not use any WooCommerce marketing integrations for Snapchat, Reddit or Pinterest for advertising or conversion tracking purposes.

21. AI Chat 2026 Desktop Application

The desktop application AI Chat 2026 It is technically separate from the public website.

To the extent that AI Chat 2026 uses local AI models, content can be processed entirely on the user's device.

If a user activates and uses external AI providers, web services or other online functions within the application, data may be transferred to the respective provider according to the selected function.

Data that a user processes exclusively locally within AI Chat 2026 will not be automatically transferred to our webshop solely due to local usage.

However, licensing, activation and update functions can communicate with our licensing and update infrastructure.

22. Storage duration

Personal data is stored only as long as is necessary for the respective purpose.

Furthermore, there may be statutory retention obligations.

After the purpose of processing ceases to exist and statutory retention periods expire, personal data will be deleted or anonymized unless there is another legal basis for further storage.

23. Recipients of personal data

Personal data will only be disclosed if this is necessary for the performance of our services, if there is a legal obligation or if a corresponding legal basis exists.

• Hosting and email service providers
• Payment service provider
• technical service providers
• IT security services
• Tax advisors or authorities, insofar as legally required
• Service providers for processing payments, orders, and contracts

We do not sell personal customer data.

24. Data transfer to third countries

Some of the service providers we use, or their subcontractors, may process personal data outside the European Union or the European Economic Area.

This can be the case particularly with international services such as Automattic/Jetpack or payment service providers.

Insofar as a transfer to a third country takes place, this will only be carried out on the basis of the legal requirements of Art. 44 et seq. GDPR.

25. Automated Decisions

As part of the payment processing, payment providers can use automated procedures for fraud and risk assessment.

This may result in a transaction being rejected or subjected to additional review.

26. Your rights

Right to information

In accordance with Article 15 of the GDPR, you can request information about whether and which personal data we process about you.

Right to rectification

According to Article 16 of the GDPR, you can request the rectification of inaccurate data or the completion of incomplete data.

Right to erasure

Under the conditions of Article 17 GDPR, you can request the deletion of your personal data.

Right to restriction of processing

Under the conditions of Article 18 GDPR, you can request a restriction of processing.

Right to data portability

Under the conditions of Article 20 GDPR, you can receive personal data in a structured, commonly used and machine-readable format.

Right to object

If processing is based on Article 6(1)(f) GDPR, you may object to the processing under the conditions of Article 21 GDPR.

Revocation of consent

Consent given can be withdrawn at any time with effect for the future in accordance with Art. 7 para. 3 GDPR.

27. Right of appeal

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

In particular, you can contact the data protection supervisory authority responsible for Baden-Württemberg or another supervisory authority responsible under Article 77 GDPR.

28. Safety

We take appropriate technical and organizational measures to protect personal data.

• encrypted HTTPS communication
• Access restrictions
• Multi-factor authentication in protected areas
• Protection against brute-force attacks
• role-based access rights
• secure license and download tokens
• time-limited download links
• regular software updates
• Technical logging of security-relevant processes

Absolute protection of data during transmission or storage cannot be technically guaranteed.

29. Changes to this Privacy Policy

We reserve the right to amend this privacy policy if technical functions, services used, or legal requirements change.

The version published on this website at any given time is the applicable one.

Last updated: 11 October 2026