This is a non-binding translation for convenience. In case of any discrepancy, the German original (Datenschutzerklärung) shall prevail.

Privacy Policy

Last updated: August 5, 2026

1. Controller

Jeffrey Hart, trading as J.H. Digital Business Solutions Triftweg 6 38173 Sickte, Germany Email: support@ewkpilot.de

2. General information on data processing

We process our users' personal data only to the extent necessary to provide a functioning website and our content and services (Art. 6(1)(b) GDPR, performance of a contract), or where a legal basis otherwise permits it.

3. Server log files and hosting

EWKPilot is hosted by Hetzner Online GmbH, with servers located in Germany. When you access the website, the server automatically collects information in server log files transmitted by your browser (including IP address, date and time of the request, page accessed, browser type). This data serves technical provision and security purposes (Art. 6(1)(f) GDPR, legitimate interest) and is not merged with other data sources.

4. Account and sign-in

Sign-in is via email link (magic link, no password). For this, we store your email address as well as a session cookie that identifies you as a signed-in user. The legal basis is Art. 6(1)(b) GDPR (performance of the usage contract).

5. Business data (products and quantity reports)

As part of using EWKPilot, we process the product and quantity report data you enter in order to enable the EWKFondsG levy calculation and the export for reporting to the UBA platform DIVID. Changes to quantity reports are logged in a tamper-evident manner (a legal requirement under the EWKFondsG audit guidelines). The legal basis is Art. 6(1)(b) GDPR (performance of a contract) as well as Art. 6(1)(c) GDPR (legal obligation to ensure traceability).

6. Payment processing: Stripe

For paid plans (Starter/Pro), we use Stripe Payments Europe, Ltd. as our payment service provider. Payment data (e.g. billing address, payment method) is transmitted directly to Stripe and processed there. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Details: stripe.com/de/privacy.

7. Email delivery: Resend

For sending sign-in links and transactional emails (e.g. welcome email, deadline reminders), we use the Resend service. Your email address and the respective message content are transmitted to Resend for this purpose. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

8. AI features: Anthropic

For certain, voluntarily used features (receipt evaluation, unit-weight suggestion for POS imports, audit assistant, catalog assistant), we use Anthropic as our AI service provider. The data you enter or upload (e.g. receipts/invoices, item descriptions, business descriptions, product details) is transmitted to Anthropic for processing. The result is always shown to you as a suggestion and only applied after your confirmation — no automated decision within the meaning of Art. 22 GDPR is made. The legal basis is Art. 6(1)(b) GDPR (performance of a contract), since you actively trigger these features. Details: anthropic.com/legal/privacy.

9. Data processing agreements

Data processing agreements pursuant to Art. 28 GDPR are in place with Hetzner, Stripe, Resend, and Anthropic.

10. Retention period

We store personal data only as long as necessary for the stated purposes or as required by statutory retention obligations (e.g. under the EWKFondsG audit guidelines). After you cancel your account, we delete your data unless a retention obligation prevents this.

11. Your rights as a data subject

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). Please contact support@ewkpilot.de for these matters.

12. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. Generally, the competent authority is either the one at your habitual residence or at our registered office: Die Landesbeauftragte für den Datenschutz Niedersachsen.

13. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption for the transmission of all content.