1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Emre Cilesiz
Elzstraße 20
79261 Gutach im Breisgau
Germany
E-Mail: info@websterai.de
2. General information on data processing
We process personal data only to the extent necessary to provide a functional website, account, workspace, billing and support services. Processing is based on the GDPR, in particular Art. 6(1)(a) (consent), (b) (contract or pre-contractual steps) and (f) (legitimate interest). Legitimate interests include secure operation, service improvement, fraud prevention and reliable communication.
3. Hosting and infrastructure
The website and application run on infrastructure operated for Webster in the European Union, currently using a Scaleway-based deployment with TLS termination, PostgreSQL and MongoDB services. Connection data and, where necessary to provide the requested feature, account and project data are processed by these infrastructure services under our instructions. We use additional processors for identity, email, payments and AI features only where needed. A transfer to a third country can occur where a configured processor is established there; we use an applicable adequacy decision or contractual safeguards such as EU Standard Contractual Clauses.
4. Server log files and security data
When you access the website or application, technically necessary connection data may be processed, e.g. IP address, date and time of the request, requested URL, referrer URL, browser and operating system information, status codes and security events. These data are used to deliver the service, protect systems and troubleshoot technical faults. The legal basis is Art. 6(1)(f) GDPR. We retain them only as long as needed for these purposes and do not use them for advertising profiles.
5. Cookies and browser storage
We use technically necessary cookies or similar storage. In particular, we store the selected language in the “PARAGLIDE_LOCALE” cookie so the site can be shown in your preferred language (legal basis Art. 6(1)(f) GDPR / § 25 (2) TDDDG). Session, security and preference storage may be required for the application to work. We currently do not set analytics or marketing cookies ourselves. You can delete or block cookies in your browser settings; some features may then be limited.
6. Accounts, workspaces and contact
When you create an account, use a workspace or contact us, we process the data required for that interaction, such as name, email address, authentication data, project content, prompts, uploaded files, usage records and messages you send us. The purposes are account administration, providing the requested build and publishing features, support, security and billing. The legal basis is Art. 6(1)(b) GDPR for performing the agreement and Art. 6(1)(f) GDPR for security and service operations. We retain data for the duration of the account and applicable statutory retention periods; deletion requests are handled according to the data involved and any legal duties.
7. AI, payments and other processors
To provide requested features, selected prompts, files, project content and usage data may be sent to configured processors for AI model inference, email delivery, authentication, payment processing and hosting. We share only what is needed for the requested feature, require appropriate data-processing terms where applicable and do not sell personal data. The current processor configuration, storage locations and retention periods must be kept aligned with this notice before each production deployment.
8. Your rights
Under the GDPR you have in particular the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, email info@websterai.de.
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority about our processing of personal data. In particular, the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg is competent (https://www.baden-wuerttemberg.datenschutz.de/).