Draft — not yet reviewed by a lawyer
This page was prepared for the Owner as a first draft and has not yet been reviewed by a qualified German lawyer. It must not be treated as final and must not be relied upon until that review is complete and this notice is removed.
Privacy Policy
Last updated: August 29, 2026
This privacy policy explains which personal data is processed when you use AIProCraft.com — the website and the AI Campaign Operator product — and what rights you have as a data subject.
Data controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is M. Amin Sayegh, trading as AIProCraft, Paul-Bertz-Str. 38, 09120 Chemnitz, Germany. Contact details are listed in the Impressum.
Registration and user account (Supabase)
For registration, sign-in, and account management we use the infrastructure of Supabase, hosted in the EU (region eu-west-1, Ireland). This stores your account and access data (email address, encrypted password, sign-in timestamps) and everything you create in the product — in particular campaign briefs, your saved Brand Memory, generated Strategies, Creative Angles, Images, and Copy, and their full version history. Sign-in is currently email-and-password only; we do not offer sign-in with Google or any other third-party account.
AI-assisted campaign generation — Anthropic (Claude)
When you generate a Strategy, a Creative Angle, or Copy, we send the content needed for that operation — your campaign brief (topic, campaign goal, target audience, platform, format, and call to action) and the relevant parts of your saved Brand Memory (company description, offers, target audience description, brand voice, approved and forbidden claims, creative rules, website and CTA references, language configuration) — to the AI provider Anthropic, PBC (San Francisco, USA), for processing with its language model "Claude". This content may include personal data if you enter such data yourself in these fields (for example a name inside a target-audience description). The result Claude produces (the Strategy, Creative Angle, or Copy) is stored in your account. Because Anthropic is based in the USA, this involves a transfer to a third country; it takes place on the basis of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) under Anthropic's data processing agreement. The legal basis for this processing is performance of the contract between you and AIProCraft (Art. 6(1)(b) GDPR).
AI-assisted image generation — Google (via the Vercel AI Gateway)
When you generate a campaign image, we send image-prompt text derived from your approved campaign Strategy (the campaign objective and core message) through Vercel's AI Gateway infrastructure to Google's "Gemini" image model, processed on Google's Vertex AI platform. The resulting image is stored in your account. Both Vercel and Google process this request in the USA; the transfer takes place on the basis of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). As with Anthropic above, the legal basis is performance of the contract (Art. 6(1)(b) GDPR).
Payment processing via Stripe
We use the payment provider Stripe to sell AIPro Credits. The checkout flow (Stripe Checkout) is live, and payments processed through it are real. The data required for payment processing (for example your email address and payment details) is transmitted directly to Stripe, and Stripe's own privacy policy additionally applies. The legal basis is performance of the contract, or pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
Shopify connection (optional)
If you connect your Shopify store to AIProCraft, this happens only with your explicit authorization, through Shopify's standard authorization procedure (OAuth). Access is limited to the read-only "read_products" permission; we read only your product catalog (title, handle, description, variants, prices, and image URLs) and sync it into your account. We do not access or process order, customer, or payment data from your store. The catalog data is currently used only to display your products in your account — automatically using this data to inform generated campaign content is not implemented today. Your Shopify access credentials are stored encrypted (Supabase Vault) and are not shared with third parties. The legal basis is your explicit authorization in the course of performing the contract (Art. 6(1)(b) GDPR).
Meta connection (Facebook/Instagram, optional)
If you connect a Facebook Page or Instagram account to AIProCraft, this happens through Meta's "Facebook Login for Business" authorization flow. We request the permissions "public_profile", "pages_show_list", and "instagram_basic"; depending on how your Facebook Page is configured, the permissions actually granted may include additional Page-level permissions. We store the connection data (for example the connected Page and its permission status) and an encrypted access token (Supabase Vault). Actually publishing to Facebook or Instagram is not active today — every publish action in the product is currently simulated, and no external channel is contacted. The legal basis is your explicit authorization in the course of performing the contract (Art. 6(1)(b) GDPR).
Hosting (Vercel)
This website and the product are hosted on Vercel's infrastructure. When you access the site, Vercel automatically processes technical server log data (for example IP address, access time, the page requested, and browser/system information) required for hosting, security, and stability.
Website analytics (Vercel Web Analytics)
On the public marketing pages only (not inside the signed-in product) we use Vercel Web Analytics and Vercel Speed Insights to collect aggregated, anonymous statistics about page views and technical performance. No third-party cookies are used; visitor sessions are recognized using a hash value that is deleted after 24 hours. No advertising or cross-site tracking takes place, and no personal data such as names, email addresses, or account data is transmitted to this tool.
Cookies and technically necessary storage
This website currently uses no marketing or tracking cookies. Technically necessary cookies or comparable storage technologies are used for your language preference, sign-in and session management, and security. Because no non-essential analytics or marketing tools are currently in use, no cookie banner is shown at this time. If tools such as these are added in the future, cookie and consent mechanisms will be reviewed and implemented before they are activated.
Early-access email sign-up
If you sign up in the Pricing section for a notification about when pricing launches, we process your email address, your selected language, the exact text you agreed to by checking the consent box, and the time of sign-up. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with future effect by contacting us at info@aiprocraft.de; an automated unsubscribe mechanism is not yet in place. We store this data until we have sent a pricing announcement or you withdraw your consent, and in any case no longer than 24 months after your sign-up.
Invoicing and payment records
Records of Credit purchases processed through Stripe are retained for the legally required period under German commercial and tax record-keeping obligations.
Retention period
Beyond the specific periods above, we retain personal data only as long as necessary for the relevant processing purpose, as long as a statutory retention obligation applies, or until you object to further storage. We retain your account and product data for as long as your account exists. You can request deletion of your account at any time by emailing info@aiprocraft.de; a self-service account-deletion feature is not yet available in the product itself.
Your rights under the GDPR
You have the right to access, rectify, erase, or restrict the processing of your personal data, as well as a right to data portability and a right to object to processing. You can withdraw any consent you have given at any time with future effect. You also have the right to lodge a complaint with a data protection supervisory authority.
Contact for privacy inquiries
For any questions about data protection, you can reach us at info@aiprocraft.de.