Privacy Policy

The data controller for this website is: LEIT Smart Solutions GmbH Torgauerstr. 231 04178 Leipzig Germany Email: [email protected] Website: www.lernpilot.ai

When you visit our website, certain information is automatically sent to our server. This includes your IP address, date and time of access, browser type, and referring URL. This data is processed to ensure the smooth operation of our website and for security purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

When registering, we collect your name, email address, and preferred language. This data is processed to provide our service (Art. 6(1)(b) GDPR). Your learning content, progress, and uploaded documents are stored exclusively for your personal account and are only accessible to you.

Uploaded documents are processed by AI systems to generate summaries, quiz questions, flashcards, and other learning materials. Processing is solely for providing our learning features. Your documents are not used for AI model training and are not shared with third parties. Legal basis: Art. 6(1)(b) GDPR (contract performance). Data Processing Agreement (DPA): We engage specialized service providers as data processors pursuant to Art. 28 GDPR for AI processing. Data Processing Agreements have been concluded with all processors to ensure GDPR compliance. Processing takes place exclusively within the EU/EEA or based on appropriate safeguards pursuant to Art. 46 GDPR.

Your data is stored on secure servers within the European Union. Database servers are located in data centers in Germany (Frankfurt am Main) and are operated by certified hosting providers. Transmission is encrypted via TLS/SSL. We implement technical and organizational measures to protect your data against manipulation, loss, destruction, or unauthorized access. Uploaded documents are stored encrypted in an S3-compatible object storage. Access is only possible through authenticated, time-limited URLs.

We use Umami Analytics, a privacy-friendly, GDPR-compliant web analytics tool. Umami does not store personal data, does not use cookies, and does not create user profiles. Only anonymized usage statistics are collected (page views, session duration, country of origin). Additionally, we use Google Analytics 4 (GA4) and Meta Pixel only with your prior consent via our cookie consent banner (Art. 6(1)(a) GDPR). You can revoke your consent at any time.

We use Stripe (Stripe, Inc., San Francisco, USA) for payment processing. Your payment data is transmitted directly to Stripe. We do not store complete credit card numbers or bank details. Stripe is PCI DSS Level 1 certified. Data transfer to the USA is based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. More information: https://stripe.com/privacy

Our website uses cookies: • Technically necessary cookies (session management, authentication) — Legal basis: Art. 6(1)(f) GDPR • Analytics cookies (GA4, Meta Pixel) — only with your explicit consent via our cookie banner (Art. 6(1)(a) GDPR) You can configure your browser settings and change your cookie preferences at any time via the cookie banner.

You have the following rights regarding your personal data: • Right of access (Art. 15 GDPR) • Right to rectification (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object (Art. 21 GDPR) • Right to withdraw consent (Art. 7(3) GDPR) Contact: [email protected] You also have the right to lodge a complaint with a data protection supervisory authority.

You can delete your account at any time. Upon deletion, all personal data, uploaded documents, and generated learning content will be permanently deleted. Data that must be retained due to legal obligations (e.g., billing data per §§ 147, 257 HGB/AO: 10 years) will be deleted after the retention period expires.

We reserve the right to update this privacy policy to comply with current legal requirements or to reflect changes in our services.