Last updated: 29 October 2026. This is a translation for convenience; the German version prevails.
1. Controller
Fabian Budde, Am Eickhagen 9, 59909 Bestwig, Germany, email: hello@getmind.io.
2. Hosting and server logs
getmind.io, the admin (app.getmind.io) and customer websites run on a server of Hetzner Online GmbH in Germany. The server logs technical access data (IP address, time, requested URL, browser identifier, status code) for secure operation and troubleshooting (Art. 6(1)(f) GDPR). Logs are deleted after 30 days at the latest. A data processing agreement with Hetzner is in place.
3. Analytics
We use our own cookieless analytics (Tacilytics, run on our server). It sets no cookies and stores no IP addresses; to count daily visits it derives a daily rotating, irreversible hash from IP address and browser identifier. It records the page viewed, referring page, device type and country in aggregated form (Art. 6(1)(f) GDPR).
4. Embedded videos
Some blog articles contain YouTube videos (Google Ireland Ltd.), embedded in privacy-enhanced mode (youtube-nocookie.com). When a video loads, your IP address is still transmitted to Google, including to the USA, on the basis of the EU-U.S. Data Privacy Framework (Art. 6(1)(f) GDPR).
5. Account and admin
For your account we store your email address, name (if provided), a hashed password, your role and login times. A technically necessary session cookie (gm_s) is set and removed after logout or expiry (Art. 6(1)(b) GDPR).
6. Rebuilding your website
To rebuild your website we read and store its publicly accessible pages, images and files, solely to build and operate your new website (Art. 6(1)(b) GDPR). Where the website contains personal data of third parties, we process it on your behalf; a data processing agreement is available on request.
7. AI assistant and support chat
When you use the AI assistant or support chat, your messages and the website content needed for the answer are sent to and processed by Anthropic PBC (USA) on the basis of the EU Standard Contractual Clauses. Under its terms Anthropic does not use this data for training. We store chats and changes in your account so you can review and undo them (Art. 6(1)(b) GDPR).
8. Forms on customer websites
Submissions via contact or quote forms on websites we operate for customers are stored in the respective customer’s admin and forwarded to them by email. The website operator is the controller; we process the data on their behalf.
9. Emails and tickets
System emails (e.g. invitations, passwords, completion notices, ticket replies) are sent via our mail server at dogado GmbH in Germany. Support tickets and your messages are stored in your account for as long as they are needed.
10. Payments
Credit purchases are processed by Stripe (Stripe Payments Europe Ltd., Ireland), which receives the data needed for payment. We do not store card details (Art. 6(1)(b) and (c) GDPR).
11. Retention
We keep account data and content as long as your account exists and delete it after cancellation unless statutory retention obligations apply (e.g. invoices, up to 10 years).
12. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). Write to hello@getmind.io. You may also lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection of North Rhine-Westphalia.