Privacy Policy

ElevateMindHub GbR, Tinsdaler Weg 24, 22880 Wedel, Germany

Email: hello@elevatemindhub.com

We are not legally required to appoint a data protection officer. Please send all data protection requests to the address above.

Demo and early access requests. We process the company name, work email, phone number and your optional note in order to respond and, where agreed, to open a pilot account. Legal basis: Art. 6 (1) (b) GDPR, and Art. 6 (1) (f) GDPR (our interest in responding to business inquiries).

Console accounts. When you sign in we process your email address and authentication data to provide secure, per-person access. Legal basis: Art. 6 (1) (b) GDPR.

Console content. Agents, rules, decisions, approvals and audit records created in the console are processed to provide the service and the evidence trail it exists for. These records concern AI agents; they may contain the name of the person who approved or rejected an action. Legal basis: Art. 6 (1) (b) GDPR.

Server logs. Technically required data is processed when you access the site (IP address, browser, timestamp, page requested) to deliver the pages and maintain security. Legal basis: Art. 6 (1) (f) GDPR.

Supabase (database, authentication, form storage), hosted in the EU (Frankfurt).

Lovable (website hosting), EU.

Both act as processors under Art. 28 GDPR. We do not sell personal data and do not pass it to third parties for advertising.

Personal data is stored and processed within the European Union. Should a transfer to a third country become necessary, it will only take place on the basis of an adequacy decision or EU Standard Contractual Clauses, and this notice will be updated beforehand.

Demo and access inquiries: up to 3 years after the last contact.

Contract and accounting records: 6 or 10 years where required by § 257 HGB and § 147 AO.

Console accounts and audit records: for the duration of the pilot or contract, then deleted unless a statutory retention duty applies.

Server logs: up to 30 days.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing rests on consent, you may withdraw it at any time with effect for the future (Art. 7 (3) GDPR). Requests to hello@elevatemindhub.com.

You may lodge a complaint with a supervisory authority, for example the one responsible for us: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

We use strictly necessary cookies and browser storage only (§ 25 (2) (2) TDDDG): they keep you signed in to the console and remember your language choice. We use no analytics, advertising or tracking technologies, so no consent is required. A short notice on your first visit explains this and can be reopened at any time via the cookie settings link in the footer.

We use TLS encryption in transit, encryption of stored data, row-level access control in the database and least-privilege access for our team.

We do not use automated decision-making or profiling producing legal effects concerning you within the meaning of Art. 22 GDPR. Verdicts issued by Rule47 concern AI agents and their actions, not natural persons.

Providing your data is neither legally nor contractually required. Without the information needed to process your request, however, we cannot respond to it. Our services are directed to businesses and not to persons under 16.

We may update this Privacy Policy to reflect legal or functional changes. The current version is always available on this page.