Legal Notice & Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
Almedia GmbH, Koppenstr. 8, 10243 Berlin, Germany — Email: hello@almedia.co.

2. Overview

We take the protection of your personal data seriously and process it only in accordance with the GDPR and applicable German data protection law. This policy explains what data we process when you use this website (the “apptivate” creator partnership site).

3. Hosting & server log files

Our website is hosted by an external hosting provider. When you visit the site, the provider automatically collects and stores information in server log files that your browser transmits, in particular: IP address, date and time of the request, browser type and version, operating system, referrer URL, and the requested page. This data is processed to ensure a secure, stable and functional website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and security of our website). A data processing agreement (Art. 28 GDPR) is in place with the hosting provider. [PLACEHOLDER: insert the name and address of the actual hosting provider before going live.]

4. Local and session storage (no tracking cookies)

This website does not use tracking or advertising cookies and no third-party web analytics. We only use technically necessary browser storage: localStorage to remember your language preference, and sessionStorage to keep the Creator Briefing area unlocked during your session. This storage is strictly necessary for the requested functionality (§ 25(2) TDDDG) and involves no tracking. Legal basis: Art. 6(1)(f) GDPR.

5. Contact and partnership inquiries

If you contact us via a form on this site or by email (e.g. to apply as a creator partner), we process the data you provide — such as your name, email address, social media profile/handle, and the content of your message — in order to handle your inquiry and any follow-up. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We store this data until your request has been fully handled and delete it subject to statutory retention periods.

6. AI Script Personalizer (Creator Briefing area)

Our password-protected Creator Briefing area offers an optional AI feature that adapts our campaign script to a creator’s speaking style. If you use it and submit a YouTube channel handle or video URL, the following happens: (a) the input is sent to our service provider ScrapeCreators to retrieve the latest public video and its transcript; (b) the transcript together with our script template is sent to OpenAI to analyze the speaking style and generate a personalized script; (c) processing is orchestrated via our backend provider Supabase. Only the data you enter and the resulting public video transcript are processed for this purpose. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR (providing the requested feature / legitimate interest in supporting our creator partners). Please do not enter confidential or special-category personal data. Note that these providers may process data on servers located outside the EU/EEA (see “International data transfers”).

7. Service providers (processors) we use

We use the following processors, with data processing agreements (Art. 28 GDPR) in place:

• Our hosting provider [PLACEHOLDER: insert hosting provider name]
• Supabase (backend/database and server functions)
• OpenAI (AI text generation)
• ScrapeCreators (retrieval of public video data and transcripts)

Data is only shared with these providers to the extent necessary for the described purposes.

8. International data transfers

Some of the providers named above (in particular OpenAI and ScrapeCreators) may process data on servers in the United States. Where personal data is transferred to a third country, we ensure an adequate level of protection through appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 GDPR) and/or the EU–U.S. Data Privacy Framework where applicable.

9. Your rights

Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority — the competent authority for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

10. Right to object

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

11. SSL/TLS encryption

This site uses SSL/TLS encryption for security. You can recognize an encrypted connection by “https://” in the address bar.

12. Data retention

We store personal data only as long as necessary for the purposes described or as required by statutory retention obligations, after which it is deleted.