Privacy.

1. Controller

Comms Connect GmbH, Tal 30, 80331 München, Germany · hi@tryconduit.de · registered: HRB München.

2. Data we store on your account

• Email address (for sign-in and billing)
• 8-digit login codes (10-minute expiry, hashed)
• Active session tokens (hashed, revocable on sign-out)
• Subscription state from Stripe (tier, status, period end)
• Stripe customer ID (no card details stored on our side)
• Your private Cloudflare tunnel ID + token (so your devices can reach your bridge)
• Registered devices (label, kind, last seen)

Legal basis: Art. 6 (1) (b) GDPR (contract performance for account holders), Art. 6 (1) (a) GDPR (consent) for marketing opt-ins.

3. Data we never store

Your chat messages, voice transcripts, prompts and Claude responses live exclusively in local SQLite on the bridge on your own Mac. Our managed Cloudflare tunnel only carries encrypted WebSocket traffic between your devices and your bridge — we see encrypted bytes, not content.

4. AI providers you connect yourself (bring your own)

When you connect Anthropic (Claude), OpenAI (GPT), or Google (Gemini) with your own account or API key, the bridge on your Mac sends your prompts directly to that provider — we never see or handle this traffic. You are in a direct contract with the provider; Comms Connect GmbH is neither controller nor processor for these prompts, and each provider is an independent controller under its own terms. A local model (Ollama) stays entirely on your Mac — nothing leaves the bridge.

5. Processors (Art. 28 GDPR)

• Supabase (Frankfurt, EU): auth, account database, edge functions
• Cloudflare (US, DPF-certified): managed tunnel + DNS for your bridge
• Stripe (Ireland + US, DPF-certified): subscription billing
• Resend (EU/US, SCCs in place): transactional email (login codes, receipts)
• Vercel (US, DPF-certified): hosting of this website
• OpenAI Whisper (US, SCCs in place): speech-to-text for hosted voice input, used only when you enable hosted voice (Max plan). Audio is processed transiently and not used to train models.
• ElevenLabs (US, SCCs in place): text-to-speech for hosted voice output, used only when you enable hosted voice (Max plan).

6. Retention

Account data: deleted within 30 days of account deletion request. Stripe invoice data: retained 10 years per § 147 AO / § 257 HGB (German bookkeeping law, GDPR Art. 17 (3) (b) exemption). Server logs (Vercel/Cloudflare/Supabase): ≤30 days unless required for incident investigation.

7. Your rights (Art. 15–22 GDPR)

Access, rectify, delete, restrict, port and object. Delete-account function is built into the app (Profile → Danger zone). Or email hi@tryconduit.de — we respond within 30 days. You may complain to the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

8. Changes

We’ll email account holders before any material change. Last updated: 13 August 2026.