Privacy Policy
1. Data Controller
[COMPANY NAME]
[ADDRESS]
[COUNTRY]
Contact: [CONTACT EMAIL]
2. What Data We Process and Why
Account data: username, e-mail address, display name, and password (hashed) are processed to create and manage your user account and to provide the contracted service (Art. 6(1)(b) GDPR).
Exercise input (text): your written answers to the communication and mediation exercises are transmitted to external AI providers for automated evaluation, so that we can provide the core service you signed up for (Art. 6(1)(b) GDPR).
Voice recordings: if you use the optional microphone feature, your voice recordings are transmitted to an external AI provider solely for conversion into text (transcription); recordings are not stored permanently. This only happens after your explicit, separately given consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future via the settings on the platform, without affecting the lawfulness of processing before withdrawal.
Payment data: when you top up usage credit, payment processing is handled entirely by our payment providers (Stripe, PayPal); we only receive confirmation of the payment and, where applicable, invoicing data, which we process to fulfil statutory accounting and tax retention obligations (Art. 6(1)(c) GDPR).
Usage and progress data: your exercise results and AI-generated feedback are stored so that you can view your own progress over time; this data is used exclusively to improve your own learning experience and is not shared with third parties.
3. Recipients / Processors
We use the following categories of external service providers as processors, bound contractually to GDPR-compliant processing: AI providers for text evaluation and, where applicable, voice transcription ([LIST OF AI PROVIDERS]); payment providers (Stripe, PayPal); our hosting provider. Data is processed exclusively on servers located within the EU, unless an AI provider listed above processes data outside the EU under adequate safeguards (e.g. Standard Contractual Clauses) — see the provider's own privacy notice for details.
4. Storage Duration
Account and exercise data is stored for as long as your account exists, or until you delete individual exercise sessions, your entire training history, or your account yourself. Voice recordings are not stored beyond the transcription process. Invoicing data is retained for the statutory retention period of seven years under Austrian tax law.
5. Cookies
We only use a technically necessary session cookie to keep you logged in; we do not use tracking, analytics, or advertising cookies.
6. Your Rights
You have the right to request access to, rectification, or erasure of your personal data, to request restriction of processing, to object to processing, and to data portability, in accordance with the GDPR. You can exercise most of these rights directly in your account (deletion of individual exercise sessions, your training history, or your entire account) or by contacting us at [CONTACT EMAIL]. You also have the right to lodge a complaint with a data protection supervisory authority, in Austria the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, www.dsb.gv.at).
7. AI-Generated Results
Feedback, scores, and evaluations generated by AI systems are produced automatically based on your input and do not constitute professional mediation, psychological, or legal advice.