Privacy policy

1. Controller

Controller for this website and the Fragen service: Ideapunkt, Germany. Contact and company details: https://ideapunkt.de.

2. Data we process

Access requests: name, email, phone, optional use description, and request status.

API clients: contact data, hashed API key, quotas, and usage counts derived from interviews you create.

Interviews: question/context you provide, participant locale, conversation turns, AI-generated summaries/transcripts, and optional call audio.

Technical logs needed to operate and secure the service (e.g. IP for rate limiting).

3. Purposes and legal bases (GDPR)

Providing the service and API access (Art. 6(1)(b) GDPR contract / steps prior to contract).

Operating a beta product, security, and abuse prevention (Art. 6(1)(f) legitimate interests).

Where the interview UI collects consents for recording/AI processing, that consent supports processing of participant audio/transcripts (Art. 6(1)(a)).

4. Processors and transfers

We use infrastructure and processors such as hosting (e.g. Hetzner/Coolify stack), PocketBase database, OpenAI for realtime voice and text processing, Resend for transactional email, and Telegram to notify Ideapunkt of access approvals. Data may be processed outside the EEA by OpenAI under appropriate safeguards (e.g. SCCs) as described in their documentation.

5. Retention

Access requests and client records are kept while needed to run the service and for reasonable audit/security periods. Interview artifacts are retained so requesters can retrieve results; you may ask us to delete specific records subject to legal retention duties.

6. Your rights

You may request access, rectification, erasure, restriction, portability, and object to certain processing under GDPR. You may lodge a complaint with a supervisory authority in Germany. Contact us via https://ideapunkt.de.