Privacy

This is a courtesy translation. The German version is authoritative.

Controller

finvantage GmbH
Unter dem Schede 5, 57392 Schmallenberg, Germany
support@aitention.app

The app transmits nothing

AItention only reads files in your own home directory. There is no telemetry, no user account and no transmission of usage data. Licence checking also works offline: it compares a signature against a public key shipped with the app.

Forwarding — only if you set it up

From version 1.4.0 you can enter an address of your own in the settings. When a session then enters a state that needs you, the app sends a JSON message there: session name, project folder, application, previous and new state, timestamp.

Prompts, replies, tool calls and paths are not transmitted — only the project's folder name. With no address entered nothing happens; the field is empty as shipped. Where the message goes is entirely your decision, and what happens to it there is outside our control — vet the recipient as carefully as any other service.

Newsletter

If you sign up, we process your email address in order to send you the occasional message about AItention. The legal basis is your consent (Art. 6(1)(a) GDPR).

We use double opt-in: after signing up you receive an email with a confirmation link. Only when you click it is your address stored. Until then it exists solely in your inbox — the link carries it and expires after 48 hours. We do not put it anywhere in the meantime, not even temporarily. If you do not confirm, nothing further happens.

On confirmation an entry is created with our sending provider Mailjet — Sinch Email SAS, Paris, France, servers in the European Union — acting as a processor. Stored are your address, the time of consent and the page you gave it from (including the language version). Those details are the record Art. 7(1) GDPR requires; without it we would not be allowed to send you anything.

Your address is not passed to third parties and not used for anyone else's advertising. No transfer to a third country takes place.

You can unsubscribe at any time — one click at the end of every issue, no account and no reason needed. Your address is deleted, not merely deactivated. Your consent applies until then and can be withdrawn at any time with effect for the future.

The connection the app makes on its own: the update check

On first launch the application asks whether it may look for new versions by itself. You can change that at any time in the settings and trigger updates manually instead.

For such a check the application fetches aitention.app/appcast.xml. As with any network request, your IP address is transmitted, along with the application's own version and the system version. A profile of your system configuration is expressly not sent; that option is switched off.

The file sits on the same delivery network as this website, and its access logging is switched off. No record is therefore kept of who checked for updates, or when. The legal basis is our legitimate interest in keeping delivered software free of defects (Art. 6(1)(f) GDPR).

Visiting this website

The site is hosted at Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg). The files are stored in Frankfurt am Main and served from edge locations in Europe and North America.

We have switched access logging off. Simply visiting the site therefore records no IP addresses on our side and produces no statistics. Technically necessary connection data is processed by the host under its own responsibility so that delivery is possible at all; the legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

There are no cookies, no third-party embeds, no remote fonts and no analytics. That is also why there is no consent banner — there would be nothing to consent to.

This site uses a small amount of JavaScript served from our own infrastructure — for the language menu and the annotations on the screenshot. It stores nothing on your device and fetches nothing: no cookie, no local storage, no outbound connection. No personal data is processed as a result, and no consent under § 25 TDDDG is required. Without JavaScript the site remains fully usable; the enhancements simply do not appear.

Buying a licence

Payment is handled by Stripe (Stripe Payments Europe Limited, Dublin, Ireland). The moment you press the buy button you leave this site and enter your details there — we never see your payment data. Stripe processes your name, email address, payment details and the country information required for VAT, and where applicable a VAT identification number.

The legal basis is performance of the contract (Art. 6(1)(b) GDPR), and for the invoicing details our legal obligation (Art. 6(1)(c) GDPR). Stripe's data processing agreement applies; see stripe.com/privacy.

Delivery of the licence key

After payment, a service of ours generates your licence key and sends it by email through Amazon SES in Frankfurt am Main. Your name and email address are processed for this.

The licence key itself contains your name and email address. That is deliberate: it is the reason the app never has to ask a server and why there is no device binding. The details are stored unencrypted inside the key and are readable by anyone you hand it to — treat it like an invoice.

Email enquiries

If you write to support@aitention.app, your message is forwarded to a mailbox of finvantage GmbH. We process it in order to deal with your request (Art. 6(1)(b) or (f) GDPR).

How long data is kept

Purchase and invoicing data is kept for as long as commercial and tax law require — as a rule ten years (§ 147 AO, § 257 HGB). Email enquiries are deleted once they are settled and no retention duty stands in the way.

Transfers to third countries

Stripe and Amazon Web Services belong to groups headquartered in the United States. Where data reaches them there, this is based on the European Commission's standard contractual clauses and the providers' supplementary agreements.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Please write to support@aitention.app.

You also have the right to lodge a complaint with a supervisory authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.