Privacy Policy

We built smarterbrain.ai to hold as little of your data as possible. This policy explains, in plain language, what we collect, why, and the control you keep over it. Your passwords, your AI keys, and your conversations never reach us.

1. Who is responsible

The controller for your data under the GDPR / DSGVO is smarterbrain.ai, Keldachstraße 2, 40225 Düsseldorf, Germany. Contact: [email protected]. Full legal details are on our Impressum.

2. What we collect, and why

We are built around collecting as little as possible. We use no advertising trackers, and the only analytics is privacy-friendly and stays off until you opt in (see Analytics below, and the cookie settings on any page).

Analytics (optional, off by default). If you opt in through the cookie settings, we load Google Analytics 4 (provided by Google) to see which pages are useful. It does not run, and sets no cookies, until you consent, and you can withdraw consent at any time. Legal basis: your consent, Art. 6(1)(a) GDPR.

Contact form. If you write to us, we process the name, email address and message you submit, sent through our forms service at forms.websrv24.com so we can reply. Legal basis: Art. 6(1)(b) and (f) GDPR.

Spam protection. The contact form uses Cloudflare Turnstile to tell humans from bots, which processes limited technical data. Legal basis: Art. 6(1)(f) GDPR.

Your cookie choice. Your consent decision is stored only in your own browser (a localStorage value, sb_cookie_choice). It never leaves your device and is not a tracker. See Cookies below.

Server logs. Our hosting provider keeps standard web-server logs (IP address, time, page, user agent) to run and secure the site. Legal basis: Art. 6(1)(f) GDPR. They are kept only as long as needed for security, then deleted.

The AI assistant itself runs on a server that is yours. Your passwords, AI logins and conversations stay on your own server and never reach us.

3. Who we share it with

We use a small number of providers who process data on our behalf under a data-processing agreement: our forms service (forms.websrv24.com), Cloudflare (Turnstile), our hosting provider, and, only if you opt in to analytics, Google (Google Analytics 4). We do not sell your data and we do not share it for advertising.

4. International transfers

Where a provider processes data outside the EU/EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses. This includes Google (Google Analytics), in the United States, only if you opt in to analytics.

5. How long we keep it

Contact messages are kept while we handle your request and a reasonable time after, then deleted. Server logs have a short rolling retention for security. Your cookie choice stays until you clear it, in your own browser.

6. Your rights

Under the GDPR you can ask us for access, correction, erasure, restriction and portability of your data, and you can object to processing based on legitimate interests. Email [email protected]. You also have the right to complain to a supervisory authority; for us that is the LDI NRW (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

7. Cookies and local storage

By default the site sets no tracking cookies; the only thing stored is your consent choice (sb_cookie_choice) in your browser's localStorage, which is essential and not shared. If you opt in to analytics, Google Analytics 4 loads and sets its own cookies; until then it does not run. You can change or withdraw consent whenever you like, here or from the cookie settings on any page.

8. Changes to this policy

If this policy changes materially we will update this page and, where consent is affected, ask you again.