Humaify privacy notice

The controller is Humaify UG (haftungsbeschränkt), Kolonie 9, 14798 Havelsee, Germany, represented by managing director Tim Siebert. For privacy questions and rights requests, contact hallo@humaify.de or write to this address. Our legal notice contains the complete company details and legal telephone contact.

• Legal notice
• Email a privacy request

Railway Corporation hosts this website. Requests involve technical data needed to deliver and protect the service, including IP address, time, requested address, HTTP status and browser information. The purposes are website delivery, fault diagnosis and abuse prevention. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a reliable and secure website.

The application is deployed in Railway EU West (Amsterdam, Netherlands). This does not mean all processing stays in the EU. According to the provider information available to us, Railway platform logs are stored in US West and deleted automatically after 90 days. Support access and internal disaster-recovery copies may involve locations outside the EU. We do not have a reliable fixed deletion period for internal platform copies. The available provider information states that individual logs cannot be deleted or redacted early.

Railway's data processing addendum describes responsibilities and transfer safeguards, including standard contractual clauses and, where applicable, an adequacy decision. A European deployment region is not a promise of exclusively European processing.

• Railway privacy policy↗
• Railway data processing addendum↗

This website sets no cookies before your privacy-banner choice. After your choice, humaify-consent stores the decision, random receipt ID, time and notice version, and humaify-language stores the selected language for up to 180 days. These necessary settings let us respect your choice (section 25(2)(2) TDDDG; Article 6(1)(c) and (f) GDPR). Before a choice, switching language applies only to the current page visit. Fonts and images are served through this website. External websites open only when you follow a link.

Only with explicit consent do we use PostHog Inc.'s EU cloud to measure page views, contact, email, phone and workshop clicks, AI-demo clicks, form starts and successfully accepted form requests. The legal bases are Article 6(1)(a) GDPR and, where required, section 25(1) TDDDG. Declining does not affect website use. Statistics are off by default and stay disabled without complete project and consent-storage configuration.

We send an allowed page path, language, event type and fixed labels for the action's position, service category, contact method and form presentation. Random analytics and session identifiers are held only in this open tab's memory. There are no analytics cookies, cross-device recognition, person profiles, advertising trackers or session recordings. We do not send form values, conversation contents, full URLs, query parameters or referrers. PostHog technically receives your IP address when connecting; GeoIP enrichment is disabled and event data contains no IP address. This does not make processing fully anonymous.

Events are processed through PostHog EU. Possible third-country access is subject to the safeguards described in the data processing agreement, including standard contractual clauses where required. The data processing agreement is signed; PostHog documents one year of query availability on free plans and seven years on paid plans. This window is not automatic deletion, and a shorter period cannot be configured there. We use PostHog's standard retention and have not configured automatic annual deletion. The end of query availability alone does not delete the data. Contact hallo@humaify.de for access or erasure requests. Consent receipts are stored separately in Redis on Railway EU West (Amsterdam) for 180 days: choice, time, notice version and receipt ID, without IP address, form contents or analytics identifier (Article 6(1)(c) and Article 7(1) GDPR).

Use Privacy settings at the bottom of the screen or in the footer to change your choice or withdraw statistics consent with one click. Further collection stops immediately and the in-memory identifier is discarded. Withdrawal applies to future processing and does not affect prior lawful processing. You can download the receipt in settings. Contact hallo@humaify.de for access or erasure requests; the receipt cannot identify analytics data because the identifiers remain separate.

• PostHog privacy policy↗
• PostHog data processing agreement↗

We process your name, email address, selected topic, message and optional company name to review and answer your enquiry and, where relevant, prepare a contract. The basis is Article 6(1)(b) GDPR for contractual enquiries or Article 6(1)(f) GDPR for other business communication.

When enabled, the contact form uses Cloudflare Turnstile for abuse prevention, Redis on Railway EU West (Amsterdam) for temporary storage and access limits, and Resend for confirmation and enquiry emails. Each receives the data required for its role. Turnstile processes technical connection and browser information. Resend receives email addresses and the email content to be sent. You can alternatively contact us directly by email.

A form enquiry is held temporarily for no more than 30 minutes. It reaches our team only after you explicitly confirm your email through the link sent to you. The temporary enquiry content is then deleted. Unconfirmed enquiries expire after 30 minutes. Abuse counters last one hour or one day, depending on their purpose; a technical success marker remains for 24 hours. The confirmation email does not include your free-text message.

Forwarded emails and enquiries sent directly to us are retained according to the needs of handling the enquiry and any resulting contract. Criteria include completion of your request, necessary records and applicable statutory retention duties. The 30-minute temporary form storage period is not a deletion promise for subsequent business correspondence. Please avoid unnecessary sensitive information.

• Cloudflare privacy policy↗
• Resend privacy policy↗
• Railway privacy policy↗

Our AI phone line is not active yet. No calls are currently processed through it. The following information applies once the line is enabled.

Once enabled, the AI telephone number connects to an automated phone assistant. Conversations are transcribed in real time and processed using OpenAI through a European endpoint. Audio recordings are not permanently stored by default; audio signals are discarded from volatile memory after processing. This involves your voice, telephone number, call time and duration, contact details and the information you provide. Telnyx LLC or Telnyx Ireland Ltd. handles telephony and routing; OpenAI Ireland Ltd. provides the language-model processing, and Railway stores transcripts. The purpose is to capture enquiries, answer questions and prepare further handling. The legal bases for contact handling described above apply according to the nature of your enquiry. Transcripts are stored on Railway and deleted after six months. Conversation content is not used to train general-purpose AI models. Zero data retention at language-model providers, as provided for in the telephony contracts, is separate from the six-month transcript storage on our platform. Please provide only information needed for your request. You can contact us by email instead.

The Markdown files and MCP endpoint provide only published company and service information. No login is required. They do not send messages, book appointments or query customer data. Access involves the technical connection data described above. Do not include personal enquiries or confidential business data in MCP requests.

Data is processed as necessary for the stated purposes. Recipients may include the named infrastructure, abuse-prevention and email providers and authorised people at Humaify. Processing outside the European Economic Area requires the conditions in Chapter V GDPR, such as a genuinely applicable adequacy decision or appropriate safeguards including standard contractual clauses. An EU server location alone does not exclude third-country access. Contact us for the recipients and safeguards applicable to your particular request.

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent with future effect where processing relies on consent. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Contact hallo@humaify.de; any required identity check is limited to necessary information.

You can complain to a data protection authority, particularly where you live, work or believe an infringement occurred. The Brandenburg Commissioner for Data Protection and Access to Information is a contact for our registered office. This website does not make solely automated decisions producing legal or similarly significant effects. Specific customer projects have their own processing information.

• Brandenburg data protection authority↗