aiworx
Intro call

Privacy Policy

Last updated: 8 October 2026

This privacy policy explains which personal data we process when you visit our website www.aiworx.ai, book an appointment, use our chat or contact us. Personal data is any information that can be used to identify you personally. The German version of this policy is the legally binding one.

1. Controller

AI.Worx GmbH
Borsigstraße 9
93092 Barbing
Germany

Managing Director: Maximilian Glas
Email: contact@aiworx.ai
Phone: +49 9401 884 51 60

2. Legal bases at a glance

We process personal data on the basis of the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG):

  • Consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG): for analytics and marketing services that we only use after you agree in the cookie banner.
  • Contract and pre-contractual measures (Art. 6(1)(b) GDPR): when you book an appointment or ask about our services.
  • Legal obligation (Art. 6(1)(c) GDPR): for example to document your cookie consent.
  • Legitimate interest (Art. 6(1)(f) GDPR, Section 25(2) TDDDG): for operating the website securely and reliably.

3. Hosting and server log files

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the website, technically necessary data is processed: IP address, date and time of access, page requested, referrer URL, browser and operating system. We need this data to deliver the website and protect it against attacks (Art. 6(1)(f) GDPR). Vercel stores server log files only for a short time and then deletes them.

We have a data processing agreement with Vercel. Vercel is certified under the EU-US Data Privacy Framework, which is the basis for the transfer to the USA.

The font on our website is loaded from our own server. No connection is made to Google or other font providers.

4. Consent management with Cookiebot

We use Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to manage your consent. Cookiebot shows the cookie banner on your first visit and stores your choice. It processes a shortened IP address, date and time of consent, browser information, the URL visited and a random consent ID. Your choice is stored in the "CookieConsent" cookie for up to 12 months.

The legal basis is Art. 6(1)(c) GDPR, as we are required to document consent. You can change or withdraw your consent at any time via the "Cookie settings" link at the bottom of every page or at the end of this privacy policy.

5. Google Tag Manager

We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Tag Manager is a tool we use to integrate the Google services described below. It does not set cookies or analyse data itself. When it loads, your IP address is transmitted to Google. The legal basis is our legitimate interest in managing the integrated services easily (Art. 6(1)(f) GDPR). The analytics and marketing services are only loaded after your consent.

6. Google Consent Mode

We use Google Consent Mode in its basic form. As long as you have not agreed in the cookie banner, Google Analytics and Google Ads are not loaded at all. No cookies are set and no data is sent to Google. Google Analytics only becomes active once you agree to the "Statistics" category, and Google Ads conversion tracking only once you agree to "Marketing".

7. Google Analytics 4

With your consent, we use Google Analytics 4 by Google to understand how our website is used and to improve it. Pseudonymous usage data is collected, such as pages viewed, time spent, where the visit came from, device, browser and approximate location, as well as events such as opening the appointment picker, completing a booking or clicking our email address or phone number. We do not transmit your name, email address or other direct contact details. Google Analytics 4 does not store IP addresses.

Google Analytics sets cookies such as "_ga" and "ga*" with a lifetime of up to 2 years. Usage data is deleted after 14 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Google.

8. Google Ads conversion tracking

With your consent, we use Google Ads conversion tracking (Google). If you reach our website via one of our Google ads, a cookie (for example "_gcl_au", lifetime up to 90 days) stores that you came via an ad. If you then book an appointment, we and Google learn that an ad led to a booking. This lets us measure how well our ads work. We do not receive any information that identifies you personally.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework.

9. Appointment booking via Calendly

We use Calendly by Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA, to book intro calls. The appointment picker on our website is our own interface. Nothing from Calendly is loaded in your browser when the available slots are shown; the request runs through our server.

When you book an appointment, we transmit your name, email address, your answers to the questions in the form, your time zone and the selected slot to Calendly. Calendly creates the appointment, sends the confirmation and reminders by email and adds the appointment to our calendar. To prevent abuse, we briefly process your IP address to limit too many booking attempts in a short time. It is only kept in memory and discarded after 10 minutes at the latest.

The legal basis is taking pre-contractual steps at your request (Art. 6(1)(b) GDPR) and, for abuse prevention, our legitimate interest (Art. 6(1)(f) GDPR). We have a data processing agreement with Calendly. Calendly is certified under the EU-US Data Privacy Framework. We keep appointment data as long as it is needed to prepare and hold the call and for a possible collaboration, and then delete it after 90 days.

10. Chat on the website

You can use our AI chat on our website. The chat is AI.Worx GmbH's own solution and is loaded from widget.aiworx.ai. When it loads, the chat stores its configuration in your browser's local storage. When you use the chat, we process the content of your messages, the time and technical details such as browser and device, as well as contact details if you provide them in the chat. Answers are generated with the help of an AI language model.

Chat histories are stored with Supabase on servers in Frankfurt am Main (Germany). To generate answers, we send the chat history to the provider of the AI language model. Your input is not used to train AI models. We delete chat histories after 5 months.

The legal basis is answering your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering questions about our services quickly (Art. 6(1)(f) GDPR). Please do not enter sensitive data in the chat.

11. Contact by email or phone

If you contact us by email or phone, we process your details to handle your request (Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR). We delete the data once your request has been fully handled and no statutory retention obligations apply.

12. Links to other websites

Our website contains links to other websites, for example LinkedIn or our products pingo, grace and nodistance. These are simple links, not embedded plugins. Data is only transferred when you click a link. The privacy policies of the respective providers apply to the linked sites.

13. Retention

Unless a specific period is stated in this policy, we only keep personal data for as long as is necessary for the respective purpose or required by statutory retention periods, for example up to 10 years under commercial and tax law.

14. Your rights

You have the right at any time to:

  • access your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)

Just write to us at contact@aiworx.ai.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

15. Encryption

For security reasons, our website uses SSL/TLS encryption. You can recognise it by the "https://" in your browser's address bar.

16. Changes to this privacy policy

We update this privacy policy when our website, our services or the legal situation change. The version published here applies.

17. Cookies and consent in detail

The following overview is generated automatically by Cookiebot and lists all cookies and similar technologies on this website. You can also change or withdraw your consent here at any time.