Privacy Policy

1. Controller

uberlay UG (haftungsbeschränkt)
Kolonnenstraße 8
10827 Berlin
Germany

Email: niklas@superkind.ai

2. Scope

This Privacy Policy explains how we process personal data when you visit our website, contact us, or otherwise interact with us through this website. Section 5a additionally describes how we process personal data when your organization uses the Superkind platform and its apps, including our apps for Microsoft Teams and Slack and our email channel.

Our website is intended for business users and business-related inquiries.

3. Categories of Data We Process

Depending on how you use our website, we may process the following categories of personal data:

• contact data, such as your name, company name, email address, phone number, and any other information you provide to us
• communication data, such as the content of your inquiry or message
• technical and usage data, such as IP address, browser type, device information, operating system, referring URL, pages visited, access times, and similar log and analytics data
• consent and preference data, such as your cookie and analytics preferences

4. Purposes and Legal Bases of Processing

We process personal data for the following purposes and based on the following legal bases:

a) Providing the website and ensuring security and stability

We process technical data and server log data to provide the website, maintain its security, prevent abuse, and ensure stability and performance.

Legal basis: Article 6(1)(f) GDPR (legitimate interests)

Our legitimate interests are the secure, reliable, and efficient operation of our website and infrastructure.

b) Responding to inquiries

If you contact us by contact form or email, we process your data to handle your request, communicate with you, and, where relevant, take steps prior to entering into a contract.

Legal basis: Article 6(1)(b) GDPR, where your request relates to pre-contractual measures or a contract; Article 6(1)(f) GDPR in all other cases.

Our legitimate interest is handling inbound business inquiries and communication efficiently.

c) Managing contacts and business relationships

We may store and manage inquiry and customer-related data in our CRM system in order to organize communications, process requests, and manage our business relationships.

Legal basis: Article 6(1)(b) GDPR, where relevant to contractual or pre-contractual steps; Article 6(1)(f) GDPR in all other cases.

Our legitimate interest is the efficient management of leads, contacts, and business communications.

d) Analytics and measurement

We use analytics tools to understand how visitors use our website, improve our content, measure performance, and optimize the user experience.

Legal basis: Article 6(1)(a) GDPR where consent is required; Article 6(1)(f) GDPR where processing is strictly limited to privacy-friendly, non-cookie, aggregate, or otherwise permitted analytics.

You may withdraw any consent you have given at any time with effect for the future.

5. Hosting and Website Delivery

Our website is hosted and delivered via Vercel. In this context, Vercel may process server log data and technical connection data that is necessary to deliver the website, ensure security, and maintain availability.

This may include, in particular:

• IP address
• date and time of request
• requested page or file
• browser and device information
• operating system
• referrer URL
• status codes
• similar technical event data

5a. Superkind Platform and Apps (Microsoft Teams, Slack, Email)

When your organization uses the Superkind platform, including the Superkind app for Microsoft Teams, the Superkind app for Slack, or our email channel, we process personal data on behalf of your organization. Your organization is the controller; we act as its processor under Article 28 GDPR. The details are governed by our data processing agreement (AVV / DPA).

Depending on how the platform is used, we process:

• account and identity data, such as name, business email address, and user and workspace identifiers from Microsoft Teams or Slack
• content you send to Superkind or share with it, such as messages, emails, files, and approvals
• knowledge your organization stores in Superkind, and results produced by Superkind
• connection data for tools you connect, using only the permissions you grant
• technical and log data needed to run and secure the service

We use this data only to provide the service to your organization, for example to answer requests, carry out tasks you approve, and keep the service secure. We do not sell it and do not use it to train AI models.

Platform data is stored in data centers in Frankfurt (Germany) and Zurich (Switzerland). AI models are accessed through a gateway with zero data retention, so model providers do not store your content. Data is encrypted in transit and at rest, and access is limited to authorized personnel.

We keep platform data for as long as your organization uses Superkind. Your organization can request deletion at any time; after the contract ends, data is deleted as set out in the data processing agreement.

Our data processing agreement including the list of subprocessors, our technical and organizational measures, and a description of the data flow are available in our Trust Center. For questions about the platform, contact niklas@superkind.ai.

6. Contact Form and Email Contact

When you contact us through our contact form or by email, we process the information you provide in order to respond to your inquiry and, where relevant, to initiate or manage a business relationship.

The data you provide may include: name, business email address, company name, phone number, message content, and any additional information you choose to share.

We ask that you do not send sensitive personal data through the website unless it is strictly necessary.

7. CRM

We use HubSpot as our CRM and contact management platform. If you submit an inquiry through our website or otherwise contact us, your data may be stored, organized, and processed in HubSpot for the purpose of managing communications, tracking requests, and maintaining business relationships.

This may include: identity and contact data, company-related information, communication history, inquiry details, and internal processing notes related to your request.

8. Analytics

8.1 Vercel Web Analytics

We use Vercel Web Analytics to obtain privacy-friendly information about website usage and performance. According to Vercel, Web Analytics does not use cookies and uses anonymized or reduced data for measurement purposes.

Legal basis: Article 6(1)(f) GDPR, to the extent this processing is permissible without consent; otherwise Article 6(1)(a) GDPR.

8.2 Google Analytics

We use Google Analytics to analyze the use of our website and better understand visitor interactions. Google Analytics may process information such as pages visited, session information, approximate location, technical device and browser information, and interactions on the website.

Google Analytics is only activated where the required consent has been obtained through our consent mechanism. You can withdraw your consent at any time through the consent settings available on our website.

8.3 PostHog

We use PostHog to understand how visitors use our website, improve content and usability, and measure product interest. PostHog may process usage data such as pages visited, interactions, device and browser information, approximate location, session information, and similar analytics data.

PostHog is only activated where the required consent has been obtained through our consent mechanism. For our setup, PostHog events are sent to PostHog's EU cloud endpoint.

9. Cookies and Similar Technologies

We use cookies and similar technologies on our website. Some of these technologies are strictly necessary for the operation, security, and core functionality of the website. Others are used for analytics, performance measurement, or related optimization purposes.

Where legally required, non-essential cookies and similar technologies are used only after you have given your consent through our consent mechanism. You can change or withdraw your preferences at any time.

10. Recipients and Service Providers

We may disclose personal data to service providers and processors that support our website and business operations, in particular: Vercel, Google, HubSpot, PostHog.

We only share personal data where this is necessary for the relevant purpose and subject to appropriate contractual and legal safeguards.

11. International Transfers

Some of our service providers may process personal data outside the European Union or the European Economic Area, in particular in the United States. Where personal data is transferred to a third country, we ensure that an adequate level of data protection is in place through adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

12. Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Once the relevant retention period expires, the data will be deleted or anonymized.

13. Data Subject Rights

Subject to the applicable legal requirements, you have the following rights: access, rectification, erasure, restriction of processing, objection to processing, data portability, withdrawal of consent, and the right to lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact us at: hello@superkind.ai

14. Obligation to Provide Data

You are generally not obliged to provide personal data when visiting our website. However, certain features, such as the contact form or direct communication with us, may not function without the provision of the necessary information.

15. Automated Decision-Making

We do not use your personal data collected through this website for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

16. Data Protection Officer

Our Data Protection Officer is heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany, www.heydata.eu, datenschutz@heydata.eu.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect legal, technical, or operational changes. The version published on this website at the time of your visit shall apply.