1. General Information

This web application ("Garage Tower") processes personal data exclusively in accordance with applicable data protection laws, in particular the GDPR. This privacy policy explains what data is processed for what purpose and what rights you have.

2. Data We Collect

Registration & Login

To use the app, registration with an email address and password is required. This data is used exclusively for managing your user account.

Passwords are stored encrypted (via Supabase Auth with bcrypt).

Church Consultation Data

The consultation data you provide (church information, equipment needs, budget, etc.) is processed to generate equipment recommendations. Processing is automated through the OpenAI API. Consultation results are stored to provide access to your recommendations.

Server Logs

The hosting provider Vercel may collect technical data (e.g., IP address, browser type, access time) to ensure the operation of the app.

3. Purpose of Data Processing

• Providing the functionalities of the web app
• User management and login
• Creating church equipment recommendations via OpenAI API
• System security and error analysis

4. Legal Basis

Processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in operating and securing the app).

5. Data Recipients

• Supabase Inc. (Auth & Database services)
• Vercel Inc. (Hosting)
• OpenAI, L.L.C. (AI processing of consultation data)

These service providers act as data processors within the meaning of the GDPR, some with headquarters in the USA. GDPR-compliant contracts (standard contractual clauses) exist.

6. Data Retention

• User data remains stored as long as an account exists
• Consultation data is stored to provide access to your recommendations
• Server logs by Vercel: according to the provider, maximum 30 days

7. Your Rights

You have the right at any time to:

• Information about your stored data
• Correction of incorrect data
• Deletion of your data ("right to be forgotten")
• Restriction of processing
• Data portability
• Object to processing

Please contact us at: lorisgaller.business@gmail.com

8. SSL Encryption

The connection to this web app is made via a secure HTTPS connection.

9. Changes

This privacy policy may be updated as needed. The current version is always available on the website.

Legal Notice (Impressum)

Information according to § 5 TMG:

Janik Dietz
Wolframstraße 25
86161 Augsburg
Germany
Email: janik.dietz@irgendwas.com

Responsible for content according to § 55 para. 2 RStV:
Janik Dietz