Data Protection

1. Controller

Sven Käppner — Sole Proprietorship

Panoramastraße 23

70794 Filderstadt

Germany

Email: kontakt@searchsuite.de

2. Data Protection Officer

No data protection officer has been appointed, as the legal requirements for such an appointment are not met. Please direct data protection inquiries directly to the contact address mentioned above.

3. Overview of Processed Data

In the context of using the AI Visibility Tracker, the following personal data may be processed:

• Account Data: Email address, name, company affiliation, password (stored encrypted).
• Usage Data: Login times, created projects, search terms, performed analyses, credit consumption.
• Payment Data: Billing address, payment method token, transaction history (payment processing is handled by an external service provider).
• Communication Data: Emails to support, chat and ticket content.
• Technical Data: IP address (logged temporarily), browser type, device data, session cookies.

4. Purposes and Legal Bases

Data is processed for the following purposes:

• Fulfillment of contract (Art. 6 para. 1 lit. b GDPR): Account provision, performance of analyses, billing of services used.
• Legitimate interest (Art. 6 para. 1 lit. f GDPR): Service security, error analysis, customer communication, abuse prevention.
• Consent (Art. 6 para. 1 lit. a GDPR): Newsletters, marketing communications, optional cookies or analytics tools, where consent is required.
• Legal obligation (Art. 6 para. 1 lit. c GDPR): Fulfillment of tax and commercial law retention obligations.

5. Hosting, Infrastructure and Third-Party Providers

To provide the service, we use selected service providers. These receive only the data necessary for the respective function and are bound by a data processing agreement to comply with data protection regulations.

• Hosting & Database: Lovable Cloud (operation of the application, storage of analysis data).
• Authentication: Lovable Cloud authentication services (login, password management, session security).
• Payment Processing: Checkout is handled by an external payment service provider. Once determined, it will be named here.
• Email Sending: Transactional emails (e.g., registration, password reset) are sent via Lovable Cloud's email service.
• Analytics & Error Reporting: Error and performance logs are stored exclusively on our own infrastructure; no external analysis tools are used.

Insofar as data is processed outside the European Union, we ensure appropriate safeguards, in particular the conclusion of standard data protection clauses of the European Commission.

6. Cookies and Local Storage

The application uses technically necessary cookies and local storage for authentication and session security. If additional analytics or marketing cookies are used, this will only happen after prior consent.

7. Storage Duration and Deletion

Personal data will only be stored for as long as necessary for the stated purposes or as long as legal retention obligations exist. After termination of the contract or account deletion, data will be deleted within a reasonable period, provided no legal retention obligation prevents this.

Briefly stored technical logs (e.g., IP addresses for security checks) are automatically removed after the technically required duration.

8. Data Subject Rights

You have the right to information about your stored personal data, to rectification, erasure, restriction of processing, data portability, and, if processing is based on consent, to withdraw it at any time. You can also object to processing if it is based on legitimate interest.

9. Complaint to a Supervisory Authority

If you believe that the processing of your data violates data protection regulations, you have the right to lodge a complaint with a competent data protection supervisory authority. The competent authority is usually the supervisory authority of your place of residence or the registered office of the controller.

For the registered office of the controller, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, is responsible.

10. Changes to this Privacy Notice

This privacy notice may be adapted in the event of changes to the application or the legal framework. The current version is available on this page. Status: August 2026.