1. Data Controller

The data controller for this website and service is:

Stubbemann UG (haftungsbeschränkt)
Schmidt-Rottluff-Str. 3
26133 Oldenburg, Germany
Email: kontakt@realm.fun

2. Data We Collect

Account Data

When you sign up, we collect:

  • Email address
  • Name
  • Billing address

Payment Data

Payment information is processed by Stripe. We do not store full credit card numbers. Stripe may collect additional data as described in their Privacy Policy.

Service Data

When you use the Service, we may collect:

  • Instance configuration settings
  • Usage metrics (token consumption, API calls)
  • Technical logs for debugging and security

Your AI Agent Data

Important: We do not access, monitor, or store the content of conversations processed by your AI agents unless required for technical support at your request, or to comply with legal obligations. You are responsible for all data processed through your instances.

3. How We Use Your Data

We use your data to:

  • Provide and maintain the Service
  • Process payments and manage subscriptions
  • Send transactional emails (confirmations, invoices)
  • Provide customer support
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

We do not sell your personal data or use it for advertising purposes.

We process your data based on:

  • Contract: Processing necessary to fulfill our service agreement with you
  • Legal obligation: Processing required by law (e.g., tax records)
  • Legitimate interests: Security, fraud prevention, service improvement

5. Third-Party Services

We use the following third-party services:

  • Stripe: Payment processing (Privacy Policy)
  • Anthropic/AI Providers: AI model APIs - data transmitted depends on your usage (Anthropic Privacy Policy)
  • Hetzner: Infrastructure hosting (EU-based)

6. Data Retention

We retain your data for:

  • Account data: Duration of your account plus 30 days after deletion
  • Payment records: 10 years (legal requirement in Germany)
  • Technical logs: 90 days

After account deletion, we remove your personal data except where retention is required by law.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests

To exercise these rights, contact us at kontakt@realm.fun. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS) and at rest
  • Access controls and authentication
  • Regular security assessments
  • EU-based infrastructure

9. International Transfers

Your data is primarily processed within the EU. If data is transferred outside the EU (e.g., to AI providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

10. Cookies

We use essential cookies only:

  • Session cookies: To maintain your login state
  • Security cookies: For fraud prevention

We do not use tracking or advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

12. Complaints

If you believe we have violated your privacy rights, you have the right to lodge a complaint with a supervisory authority. In Germany, this is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
www.lfd.niedersachsen.de

13. Contact

For privacy-related questions, contact us at: kontakt@realm.fun