We, BettingOnTheFuture UG (haftungsbeschränkt) ("Beewhisper/we"), welcome your use of our website and web application ("Our Services"). In the following provisions, we inform you about the type, scope, and purposes of the collection and use of your personal data when using our services. Personal data refers to any information that relates to an identified or identifiable natural person. This includes, in particular, your name and email address.

1. Provider

The provider of the services and the controller in the sense of the GDPR is:

BettingOnTheFuture UG (haftungsbeschränkt)
Waghäuselerstraße 4
76646 Bruchsal
Germany

Business Address:
Beewhisper
Langer Anger 9
69115 Heidelberg
Germany

Email: hello@beewhisper.ai

2. Data Processing to Enable Use

Whenever you access the content of our services, connection data is transmitted to our web server. This connection data includes:

  • The IP address of the user

  • The date and time of the request

  • The referring URL

  • Device numbers such as UDID (Unique Device Identifier) and comparable device numbers, device information (e.g., device type)

  • Browser type / browser version

This connection data is not used to infer the identity of the user or merged with data from other sources, but rather serves to provide the website and ensure proper functionality. The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR.

3. Data Processing upon Request

The use of our landing page is generally possible without providing personal data. You are not obliged to visit our website or provide personal data. However, for using the web application and subscribing to communications, certain data needs to be provided.

3.1. Registration, Early Access, and Login

For registration to use our web application and for entry into the early access program, we collect the following personal data:

  • Email address: for authentication via a magic link provided through Firebase Auth

  • Organization name: for managing and categorizing early access participants

  • Company size/industry (optional): for better understanding of our user base

Purpose: Enabling registration and early access management.

Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in providing the application).

This data is required for security and to prevent misuse. The storage duration is 30 days.

Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR.

3.2. Communication and Authentication via Firebase Auth

Authentication is performed through Firebase Auth, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Firebase Auth processes your email address and IP address to provide the magic link and enable login functionality.

Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR.

3.3. Newsletter and Product Updates

If you subscribe to our newsletter or product updates via the form provided on our website, we store the data you provide (e.g., name, email address) to regularly send you our communications about product updates, features, and company news.

Purpose: Sending newsletters and product updates about our company, services, and AI conversation intelligence insights.

Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR (consent).

Note: Data transmission over the internet may have security vulnerabilities. Complete protection against third-party access is not possible.

4. Data Processing for Service Optimization

Our services use cookies to ensure functionality and analyze user behavior. Some cookies are necessary for website functionality (e.g., session cookies), while others are used for analysis and optimization (third-party cookies). You can manage or disable cookies via your browser settings, but this may limit the website's functionality.

The storage of necessary and functional cookies is based on Art. 6 para. 1 lit. f GDPR, while all others are based on your consent under Art. 6 para. 1 lit. a GDPR. You may revoke this consent at any time.

For additional privacy, you can use browser plugins like AdBlock or Ghostery to prevent tracking.

4.1. Google Analytics

Our website uses "Google Analytics" to analyze website usage and improve user experience. Data is stored in pseudonymized user profiles, using cookies. Your IP address is shortened within the EU and only anonymized data is transmitted to Google servers in the USA.

Google uses this data to evaluate website usage, create reports, and help us understand how users interact with our conversation intelligence platform. Data is not linked to personal data without your consent. For more information, see: Google Analytics Privacy Policy.

The legal basis for data processing is your consent under Art. 6 para. 1 lit. a GDPR, which you provide via our cookie banner. Note that Google may use the data for its own purposes, and the USA does not provide an adequate level of data protection. However, we have agreed on EU standard contractual clauses.

4.2. Use of Firebase Hosting

Our services are hosted via Firebase Hosting provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Firebase is used for hosting our conversation intelligence platform. When you visit, your browser loads necessary data (HTML, stylesheets, JavaScript, and images) by connecting to Firebase servers. As a result, Google becomes aware of your IP address. Google records your IP address for a period defined by them to ensure secure operation and defend against threats to the website, which is a legitimate interest under Art. 6 para. 1 lit. f GDPR. Google processes data in the USA. The legal basis for processing outside the EU is the EU-US Data Privacy Framework, certified by the US Department of Commerce. Google commits to maintaining EU data protection standards. More information: Firebase Privacy Support.

4.3. Platform Analytics and Usage Data

To improve our AI conversation intelligence platform, we may collect anonymized usage data about how you interact with our service, including:

  • Feature usage patterns

  • Performance metrics

  • Error logs (anonymized)

This data helps us optimize the platform and develop new features for conversation analysis.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in improving our services).

5. Data Transfer

We only transfer your data when it is necessary for the provision of our services, you have consented, a legal obligation exists, or another legal basis applies.

5.1. Data Transfer to Non-EU Countries

Your data may also be transferred to recipients outside the EU, including the USA, particularly through our use of Google services (Firebase, Analytics). Since the USA does not provide an adequate level of data protection equivalent to EU standards, we have agreed on EU standard contractual clauses with our service providers. Additionally, we refer to Art. 49 GDPR as the legal basis for data transfer where applicable. An adequate level of data protection is ensured through appropriate safeguards including the new EU standard contractual clauses.

6. Storage Duration

We store your data only as long as necessary to fulfill the purposes for which it was processed, or until legal retention periods expire. Specifically:

  • Account data: Until account deletion or 30 days after service termination

  • Analytics data: 26 months (Google Analytics default)

  • Communication data: Until you unsubscribe or withdraw consent

  • Log files: 30 days

6.1. Security Measures

We protect your data with appropriate technical and organizational measures against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You can request information about your personal data

  • Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data

  • Right to erasure (Art. 17 GDPR): You can request deletion of your data

  • Right to restrict processing (Art. 18 GDPR): You can request limitation of processing

  • Right to data portability (Art. 20 GDPR): You can request your data in a portable format

  • Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests

To exercise these rights, please contact us at hello@beewhisper.ai.

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

8. Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can also object to processing based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) by contacting us.

9. Automated Decision-Making

Our AI conversation intelligence platform does not make automated decisions with legal or similarly significant effects concerning you. Any AI analysis is used solely to provide insights about conversation patterns and content recommendations.

10. Changes to the Privacy Policy

We reserve the right to update this privacy policy to reflect changes in our services, legal requirements, or business practices. We will notify you of any material changes via email or prominent notice on our website. The current version is always available on our website and shows the date of last update.

11. Contact Information

If you have any questions about this privacy policy or our data processing practices, please contact us at:

BettingOnTheFuture UG (haftungsbeschränkt)
Data Protection Officer
Email: hello@beewhisper.ai
Address: Waghäuselerstraße 4, 76646 Bruchsal, Germany