Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Nils Berenbold Heckenweg 5 26605 Aurich, Germany Phone: +49 151 15268680 Email: [email protected]

2. Collection and Processing of Personal Data

We only collect personal data when you voluntarily provide it to us — in particular when signing up for our waitlist.

Waitlist Sign-up

When you sign up for our waitlist, we collect and process the following data:

Email address
IP address (at the time of sign-up, for security and anti-abuse purposes)
Date and time of sign-up and confirmation
Language preference

Sign-up uses a double opt-in process: after entering your email address, you will receive a confirmation email. Your registration is only activated after clicking the confirmation link.

3. Purpose of Data Processing

We process your data for the following purposes:

Notifying you about the CraftFlow launch and major product updates
Confirming your waitlist sign-up (double opt-in)
Protection against abuse and automated sign-ups

4. Legal Basis

Processing your email address for the waitlist is based on your explicit consent pursuant to Art. 6(1)(a) GDPR. Processing of the IP address for anti-abuse purposes is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR.

5. Storage Period

Your data will be stored until CraftFlow officially launches and you have been notified, or until you withdraw your consent. After launch, unconfirmed entries will be deleted. IP addresses are deleted after a maximum of 90 days.

6. Disclosure to Third Parties

Your data will not be sold to third parties or shared for advertising purposes. We use the following processors to provide our services:

Hetzner Online GmbH Hosting our servers (Germany).
Twilio Inc. (SendGrid) Sending confirmation emails.

Data processing agreements pursuant to Art. 28 GDPR have been concluded with these processors.

7. Your Rights

You have the following rights with respect to us:

Access (Art. 15 GDPR) — You may request information about the data we store about you.
Rectification (Art. 16 GDPR) — You may request the correction of inaccurate data.
Erasure (Art. 17 GDPR) — You may request the deletion of your data.
Restriction (Art. 18 GDPR) — You may request the restriction of processing.
Data portability (Art. 20 GDPR) — You may request the transfer of your data.
Objection (Art. 21 GDPR) — You may object to the processing of your data.

To exercise your rights, please contact: [email protected]

8. Right to Withdraw Consent

You may withdraw your consent to the processing of your email address at any time with effect for the future. To do so, send an email to [email protected]. The lawfulness of processing carried out before the withdrawal remains unaffected.

9. Cookies and Tracking

This website does not use tracking cookies or third-party analytics tools. Technically necessary cookies (e.g. for language preferences) may be set to ensure the operation of the website. These cookies do not contain personal data.

10. Data Security

We employ technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Transmission between your browser and our server is encrypted via HTTPS.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority for Lower Saxony is:

Die Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover, Germany

12. Currency and Changes

This privacy policy is currently valid as of March 2026. Due to the further development of our website or changes in legal requirements, it may be necessary to update this privacy policy.