We, Peec AI GmbH ("peec AI/we"), welcome your use of our website and web app ("Our Services"). In the following provisions, we inform you about the type, scope, and purposes of the collection and use of your personal data when using our services. Personal data refers to any information that relates to an identified or identifiable natural person. This includes, in particular, your name and email address.

1. Provider

The provider of the services and the controller in the sense of the GDPR is:

Peec AI GmbH

Triftstraße 43a

13353 Berlin

Email: hello@peec.ai

2. Data Processing to Enable Use

Whenever you access the content of our services, connection data is transmitted to our

web server. This connection data includes:

• The IP address of the user,

• The date and time of the request,

• The referring URL,

• Device numbers such as UDID (Unique Device Identifier) and comparable device numbers, device information (e.g., device type),

• Browser type / browser version.

  
  

This connection data is not used to infer the identity of the user or merged with data from other sources, but rather serves to provide the website. The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR.

3. Data Processing upon Request

The use of our landing page is generally possible without providing personal data. You are not obliged to visit our website or provide personal data. However, for using the web app and subscribing to the newsletter, certain data needs to be provided.

3.1. Registration, Waitlist, and Login

For registration to use our web app and for entry into the waitlist, we collect the following

personal data:

• Email address: for authentication via a magic link provided through Firebase Auth.

• Organization name: for managing and categorizing the waitlist.

• Purpose: Enabling registration and waitlist management.

• Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in providing the app).

  
  

This data is required for security and to prevent misuse. The storage duration is 30 days.

• Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR.

  
  

3.2. Communication and Authentication via Firebase Auth

Authentication is performed through Firebase Auth, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Firebase Auth processes your email address and IP address to provide the magic link and enable login.

• Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR.

  
  

3.3. Newsletter Subscription

If you subscribe to our newsletter via the form provided on our landing page, we store the data you provide (e.g., name, email address) to regularly send you our newsletter.

Purpose: Sending newsletters about our company, products, or services.

Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR (consent).

Note: Data transmission over the internet may have security vulnerabilities. Complete protection against third-party access is not possible.

4. Data Processing for Service Optimization

Our services use cookies to ensure functionality and analyze user behavior. Some cookies are necessary for website functionality (e.g., session cookies), while others are used for analysis and advertising (third-party cookies). You can manage or disable cookies via your browser settings, but this may limit the website’s functionality.

The storage of necessary and functional cookies is based on Art. 6 para. 1 lit. f GDPR, while all others are based on your consent under Art. 6 para. 1 lit. a GDPR. You may revoke this consent at any time.

For additional privacy, you can use browser plugins like AdBlock or Ghostery to prevent tracking.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited use of user data requirement.

4.1. Google Analytics

Our website uses "Google Analytics" to analyze website usage. Data is stored in pseudonymized user profiles, using cookies. Your IP address is shortened within the EU and only anonymized data is transmitted to Google servers in the USA.

Google uses this data to evaluate website usage and create reports. Data is not linked to personal data without your consent. For more information, see: Google Analytics.

The legal basis for data processing is your consent under Art. 6 para. 1 lit. a GDPR, which you provide via our cookie banner. Note that Google may use the data for its own purposes, and the USA does not provide an adequate level of data protection. However, we have agreed on EU standard contractual clauses.

4.2. Use of Firebase Hosting

Our services are hosted via Firebase Hosting provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Firebase is used for hosting our services. When you visit, your browser loads necessary data (HTML, stylesheets, JavaScript, and images) by connecting to Firebase servers. As a result, Google becomes aware of your IP address. Google records your IP address for a period defined by them to ensure secure operation and defend against threats to the website, which is a legitimate interest under Art. 6 para. 1 lit. f GDPR. Google processes data in the USA. The legal basis for processing outside the EU is the EU-US Data Privacy Framework, certified by the US Department of Commerce. Google commits to maintaining EU data protection standards. More information: Firebase Privacy Support.

5. Cookies and Similar Technologies

Our services use cookies and similar technologies (such as local storage, tracking pixels, and scripts) to ensure functionality, improve user experience, analyse usage and, where applicable, measure the success of our marketing measures.

Cookies are small text files that are stored on your device and read by our services upon subsequent access. We use both first-party cookies (set directly by us) and third-party cookies (set by providers whose tools we integrate).

5.1 Categories and purposes

We use the following categories of cookies and similar technologies:

• Strictly necessary (essential) cookies
  These cookies are required to provide our services and to ensure their secure operation. This includes, in particular:

  • Cookies and tokens for login and session management in our web app;

  • Cookies and technical identifiers required by our hosting and infrastructure providers (e.g. Framer, Firebase Hosting) to deliver content, balance load and protect against misuse;

  • Cookies and session data required to operate single sign-on (“SSO”) via your organisation’s identity provider and to securely maintain your SSO session.

  The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 sentence 1 lit. f GDPR (our legitimate interest in providing a secure and functional service).
  
  

• Functional cookies
  These cookies enable enhanced functionality and personalisation, for example by remembering your settings or preferences. If these cookies are set by us, the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (our legitimate interest in a user-friendly design of our services). Where required by law, we only use such cookies with your consent (Art. 6 para. 1 sentence 1 lit. a GDPR).
  
  

• Analytics cookies and pixels
  We use analytics tools to understand how our website and web app are used, which content is relevant, and via which channels users reach us. For this purpose we integrate, among others:

  • Google Analytics, implemented via Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland);

  • B2B and product analytics and tracking tools such as Vector, Default.com, Dub, HubSpot and Cometly.
    
    

  These tools use cookies, local storage or similar technologies to create pseudonymised usage profiles (e.g. page views, session duration, referrers, campaigns). IP addresses are generally shortened within the EU/EEA before being transmitted to servers of the respective providers. The legal basis for the use of analytics cookies is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), which you can give via our cookie banner. You may withdraw this consent at any time with effect for the future.
  
  

• Marketing, attribution and affiliate cookies
  We also use marketing and attribution technologies to measure the success of campaigns and partner programmes and, where applicable, to optimise our marketing measures. This includes, in particular:

  • Referral and affiliate tracking (e.g. via Rewardful);

  • Campaign and link attribution (e.g. via Dub);

  • Marketing automation and performance measurement (e.g. via HubSpot, Cometly, and pixels integrated via Google Tag Manager or other tracking scripts).
    
    

  These technologies help us understand which campaigns, links or partners have led to registrations, product usage or bookings. We use them only if you have consented to the use of marketing / analytics cookies via our cookie banner. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR (consent).
  
  

Where we use Google Workspace APIs, the use of raw or derived user data complies with the Google User Data Policy, including the limited use requirements.

Further information on data transfers to third countries (in particular to the USA) and on the safeguards used (such as standard contractual clauses) can be found in section 5 (“Data Transfer”).

5.2 SSO and authentication cookies

If you log in via single sign-on (“SSO”) using an identity provider of your organisation (for example Google, Microsoft or a comparable provider), the respective SSO provider sets cookies and similar technologies which are necessary to authenticate you, maintain your login session and prevent abuse.

We also set our own essential session cookies and tokens in our web app in order to recognise you as an authenticated user, to authorise access to your organisation’s workspace and to ensure the security and integrity of our services.

These cookies are technically necessary for the provision of our services. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 sentence 1 lit. f GDPR (our legitimate interest in secure authentication and access control).

5.3 Consent management and cookie settings

In jurisdictions where this is legally required (in particular in the EU/EEA and the UK), we display a cookie banner when you first visit our website. Via this banner you can:

• consent to the use of non-essential cookies (e.g. analytics and marketing cookies),

• reject non-essential cookies, or

• make a more granular selection, insofar as our consent tool provides such options.
  
  

Your selection is stored in a consent cookie so that we can respect your preferences on future visits. You can change or withdraw your consent at any time with effect for the future by clicking on “Cookie Settings” in the footer of our website and adjusting your preferences.

Independently of this, you can configure your browser so that it generally rejects cookies, only allows certain cookies or deletes cookies that have already been stored. In this context, please note that if you deactivate essential cookies, some functions of our services may no longer be available or may only be available to a limited extent.

6. Data Transfer

We only transfer your data when it is necessary for the provision of our services, you have consented, a legal obligation exists, or another legal basis applies.

6.1. Data Transfer to Non-EU Countries

Your data may also be transferred to recipients outside the EU, including the USA. Since the USA does not provide an adequate level of data protection, we have agreed on EU standard contractual clauses. Additionally, we refer to Art. 49 GDPR as the legal basis for data transfer. An adequate level of data protection is to be ensured in the future through the new EU standard contractual clauses.

7. Storage Duration

We store your data only as long as necessary to fulfill the purposes for which it was processed, or until legal retention periods expire.

7.1. Security Measures

We protect your data with technical and organizational measures against unauthorized access and loss.

8. Your Rights

You have the right to access, correct, delete, restrict processing, and object. Further information can be found under applicable legal provisions.

9. Right to Object

You can object to the processing of your data at any time.

10. Changes to the Privacy Policy

We will update this privacy policy as necessary. The current version is always available on our website.