Vylisae
Account

Vylisae

Privacy Policy

Last updated: 2026-10-12

1. Controller

  • [Vor- und Nachname / Firma]
  • [Straße und Hausnummer]
  • [PLZ Ort]
  • Deutschland

E-Mail: hello@vylisae.de · Phone: [Telefonnummer]

2. Principles

We collect only the data needed to create and deliver your report. We use no advertising or analytics trackers and no third-party cookies. The free numbers insight on the home page is calculated entirely in your browser; no data is sent to us.

3. Data we process

  • Orders: email address, selected product, order and payment status (Art. 6(1)(b) GDPR – contract; Art. 6(1)(c) GDPR – statutory retention).
  • Report details: first name, birth date, optional full name, optional first name and birth date of a partner, chosen focus area, tone, language and optional style notes (Art. 6(1)(b) GDPR). Please only enter details about another person with their consent, and do not enter health information.
  • Customer account: sign-in via emailed link; we store a hashed session identifier (Art. 6(1)(b) GDPR).
  • Server logs: IP address, time, requested page, user agent – for security and abuse prevention, kept for at most 14 days (Art. 6(1)(f) GDPR).

4. Cookies and local storage

We only use strictly necessary cookies: a session cookie for your account and a security cookie protecting against cross-site request forgery. Your email address and last selected product are kept in your browser’s local storage for convenience and do not leave your device that way.

5. Recipients and processors

  • Hosting: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland. Servers located in Germany.
  • Payments: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe processes payment and billing data as an independent controller or processor; transfers to the USA rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.
  • Email delivery: Resend, Inc., USA (processor; transfers based on EU Standard Contractual Clauses). Processes your email address and the content of transactional emails (access link, order confirmation, report ready).
  • Text generation: an AI language model provider (currently DeepSeek) receives only the pre-calculated numbers, your selected options (focus area, tone, language) and optional style notes, from which email addresses, links and phone numbers are removed automatically. Names, birth dates, email addresses and payment data are not transmitted; names are inserted into the text on our own server.

6. Retention

We keep report details and generated reports for as long as your account exists so you can access them again; on request we delete them earlier. Order and invoice data are kept for the statutory periods (up to 10 years).

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on Art. 6(1)(f) GDPR. Contact us at hello@vylisae.de.

You may also lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence.

8. Automated generation

Report texts are generated automatically with the help of an AI model. No automated decision with legal effect within the meaning of Art. 22 GDPR takes place. The German version of this policy is legally binding.