Privacy Policy

Controller

André Herling
Ursula-von-Reibnitz-Str. 2, 42287 Wuppertal, Germany
Email: andre@herling.pro
Phone: +49 202 29993910

Scope

This Privacy Policy explains how Grape AI may process personal data in connection with the website, access requests, accounts, rooms, communication, and other service functions. Grape AI is an evolving project. Access, features, and service configurations may be limited, approval-based, experimental, or otherwise unavailable. This Policy describes categories of processing that may apply depending on how the service is used and configured.

Data processed

Grape AI may process personal data and other information necessary or relevant for providing, operating, securing, supporting, developing, or administering the service. Depending on the service configuration and use, this may include information provided by users or participants, information generated during use, technical and operational information, communication and media content, and information required for access, security, support, or legal compliance.

Purposes and legal bases

Personal data may be processed to provide and operate Grape AI; manage access, accounts, rooms, and service configuration; provide communication, media, AI-assisted, or other requested functions; maintain security and reliability; prevent misuse and investigate faults; respond to requests; and comply with legal obligations. The legal basis depends on the specific processing and may include Art. 6(1)(b), (c), and (f) GDPR, or consent where required. Where processing is based on consent, consent may be withdrawn at any time with effect for the future. Where particular information is necessary to provide access or a requested service function, failure to provide it may mean that the relevant access or function cannot be provided.

Communication, recording, and AI processing

Depending on the service configuration, Grape AI may process audio, video, text, and related content to provide communication, translation, captions, transcripts, generated output, recording, storage, post-processing, or similar functions. If recording or further processing is enabled, content may be retained and processed for the configured purpose. Room operators are responsible for ensuring that participants are appropriately informed and that required permissions or consent have been obtained.

External providers

Grape AI may use external providers or other recipients where necessary or useful for operating or providing the service. Depending on the configuration, this may include providers of AI, media, hosting, storage, identity, communication, email, security, or similar services. Where an external provider is used, information necessary for the relevant function may be transmitted to and processed by that provider. Billing and payment functionality is not currently active or available to users. If it is made available in the future, relevant billing or payment providers may process the data necessary to provide that function.

International transfers

Personal data may be processed outside the European Union or European Economic Area where this is necessary for a configured provider or service function. Where applicable, transfers are based on an adequacy decision, appropriate safeguards, or another lawful transfer mechanism. Information about the relevant safeguard may be requested using the contact details in this Policy.

Automated processing

Grape AI does not make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals, unless separately disclosed where required by law.

Cookies and browser storage

Grape AI may use cookies, browser storage, or similar technologies where necessary for operation, security, access control, preferences, or service functionality. Grape AI does not use advertising tracking.

Retention

Personal data may be retained only for as long as necessary for the relevant purpose, the operation and security of the service, applicable legal obligations, dispute resolution, or legal claims. Retention is determined by the purpose of processing, the nature of the service function, security and operational needs, and applicable legal requirements. Temporary service data is retained only for the period needed for the relevant function; account and service records may be retained while access or the related relationship continues; and legally required records may be retained for the applicable statutory period.

Your rights

Subject to applicable law, you may have rights relating to your personal data, including rights of access, correction, deletion, restriction, portability, objection, withdrawal of consent, and complaint to a competent supervisory authority.

For privacy requests, contact andre@herling.pro.

Changes

This Privacy Policy may be updated when Grape AI, its processing activities, its providers, or applicable legal requirements change. The current version will be published with an updated effective date.