Privacy Policy
How we collect, use, and protect your personal data
Effective: February 2026
Data Controller
Henri Müller
DataForge (Sole Proprietorship)
c/o Online-Impressum.de #6196
Europaring 90
53757 Sankt Augustin, Germany
Email: henri.mueller@data-forge.dev
Data We Collect
We collect the following categories of personal data:
Account Data
Name, email address, password (hashed), profile settings
Usage Data
Log data, feature usage, session duration, browser type
Payment Data
Billing address, payment method (processed by Stripe)
User Content
Data files you upload for processing, saved configurations
Communication Data
Support requests, feedback, contact form submissions
Purpose and Legal Basis
We process your data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Providing our services | Contract performance (Art. 6(1)(b) GDPR) |
| Processing payments | Contract performance (Art. 6(1)(b) GDPR) |
| Sending service notifications | Legitimate interest (Art. 6(1)(f) GDPR) |
| Improving our services | Legitimate interest (Art. 6(1)(f) GDPR) |
| Marketing communications | Consent (Art. 6(1)(a) GDPR) |
| Legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
Your Rights
Under GDPR, you have the following rights:
Right of Access
Request a copy of your personal data
Right to Rectification
Request correction of inaccurate data
Right to Erasure
Request deletion of your data ('right to be forgotten')
Right to Restriction
Request limitation of processing
Right to Data Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw consent at any time without affecting prior processing
To exercise these rights, contact us at henri.mueller@data-forge.dev
Sub-processors
We use the following third-party services to provide our platform:
| Service | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Cloud infrastructure, AI services | EU/US (Standard Contractual Clauses) |
| Stripe | Payment processing | US (Standard Contractual Clauses) |
| Resend | Transactional email delivery | US (Standard Contractual Clauses) |
| Hetzner | Server hosting | Germany |
| PostHog | Product analytics (EU) | Germany (Frankfurt) |
International Transfers
Some of our sub-processors are located outside the EU. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) approved by the European Commission.
Data Retention
- Account data: Retained while your account is active, deleted within 30 days of account deletion
- Usage data: Retained for 12 months for service improvement
- Payment records: Retained for 10 years as required by German tax law
- Uploaded data files: Automatically deleted 24 hours after upload, unless synced to AI Search for chat use
Data Processing Agreement
Business customers who use DataForge to process personal data on behalf of their organization may require a Data Processing Agreement (DPA).
Download our DPA →Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email or platform notification.
Contact
For privacy-related inquiries, contact us at henri.mueller@data-forge.dev