Privacy Policy

Version 1.1, last updated: March 6, 2026

1. Data Controller

Carve Studio GmbH
Cosimastr. 121, 81925 Munich
Email: [email protected]

The controller is the natural or legal person that determines the purposes and means of processing personal data.

2. General Information on Processing

We process personal data only in accordance with applicable law, especially the GDPR. We only process data required to operate our service, provide requested features, and communicate with you.

The legal basis is primarily Article 6(1)(a), (b), and (f) GDPR. Consent can be withdrawn at any time with effect for the future.

3. Hosting

Our website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Technical operation is provided through our VPS setup. Server logs are maintained by the hosting provider.

More information:https://www.strato.de/datenschutz/

4. Data We Process

Account Data

During registration, we process first name, last name, and email address to provide and secure your account.

Contact Requests

If you contact us by email or contact form, we process the submitted data to handle your request.

Uploaded Files

Uploaded PDF forms and related data are processed only to technically deliver the service you requested.

5. Cookies and Technical Storage

We only use technically necessary session cookies for authentication and login security.

Cookie NamePurposeLifetime
better-auth.session_tokenSession authenticationSession
__Secure-better-auth.session_tokenSession authenticationSession

We do not use tracking cookies or advertising cookies.

6. Analytics (Umami)

This website uses self-hosted Umami analytics. No cookies, persistent user IDs, or full IP addresses are stored. Data is evaluated only in aggregated form.

7. External Services

OpenAI API

We use the OpenAI API (OpenAI, LLC, USA) for technical document structure analysis. Only technical schema data and field names are processed.

More information:https://openai.com/privacy

YouTube

We use YouTube for embedded videos with enhanced privacy mode enabled.

More information:https://policies.google.com/privacy

8. Retention

We keep personal data only as long as required for the specific purpose or as required by statutory retention obligations.

9. Your Rights

Subject to the legal requirements, you have rights to access, rectification, deletion, restriction of processing, data portability, and objection.

You also have the right to lodge a complaint with a supervisory authority. For us, the competent authority is generally the Bavarian Data Protection Authority (BayLDA).

10. Contact for Privacy Requests

For privacy-related requests, contact us at [email protected]. We usually respond within 30 days.

11. Changes to this Privacy Policy

We may update this privacy policy when legal requirements or our services change. The current version published on this page applies.