Privacy policy

This policy explains which personal data humanize.ai processes, why, and on which legal basis (GDPR). The German version is legally binding.

1. Controller

FollowerX GmbH, Bei St. Annen 2, 20457 Hamburg, Deutschland · business@twentyfirst.media

2. Hosting and server logs

The site is hosted by [hosting provider]. Technically necessary data (IP address, timestamp, URL, user agent) is processed to operate the service securely (Art. 6(1)(f) GDPR) and deleted after at most 14 days.

3. Account and sign-in

We process your email address, optional name, a bcrypt-hashed password (if set), language and credit balance to provide the service (Art. 6(1)(b)). Sign-in links are sent via our email provider. With Google sign-in we receive your name, email and profile picture from Google Ireland Ltd. Short-lived counters per IP and email address protect against abuse (Art. 6(1)(f)) and expire within 24 hours.

4. AI processing of your texts

Texts you submit are sent to our AI provider (Anthropic PBC, USA; OpenAI, L.L.C., USA only if configured as fallback) and stored in your history (Art. 6(1)(b)). Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses. The providers state that API data is not used for training. Please do not submit special categories of data or third-party data without a legal basis. The landing-page demo stores no texts.

5. Payments

Payments are processed by Mollie B.V., Amsterdam, Netherlands. We receive only status, amount and a customer ID. Invoice data is retained for up to 10 years as required by German tax law, also after account deletion (then unlinked from the account).

6. Cookies and analytics

We only use strictly necessary cookies (session, security, language, your consent choice). Only with your consent (Art. 6(1)(a)) do we load Plausible Analytics (EU-hosted, no cookies, no IP storage). You can withdraw consent at any time via “Cookie settings” in the footer.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to lodge a complaint with a supervisory authority. You can export all your data and delete your account in settings at any time.