Legal

Privacy Policy

Last updated: June 2026. This policy applies to the website aifoundyou.de and follows the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

In short: This website is cookie-free. For reach measurement we use a privacy-friendly, cookieless web analytics tool (Umami). We do not use advertising cookies. Beyond that, we only process personal data when you contact us, use the AI visibility scanner, request the full report or purchase a paid package (payment via Stripe, AI-assisted analysis - see sections 11 and 12).

1. Controller

TB Growth Invest GmbH (brand "AI found you"), Gulmstrasse 62, 6315 Oberaegeri, Canton of Zug, Switzerland. Managing Director: Thorsten Busche. E-mail: datenschutz@aifoundyou.de.

2. Visiting the website (server logs)

When you visit the website, our hosting provider processes technically necessary data in server log files: IP address, date and time of access, the page requested, browser type and operating system. This data is required to operate and secure the website (legal basis: Art. 6(1)(f) GDPR, legitimate interest in a stable, secure service). The IP address is already shortened at logging time (the last address block is removed) and thereby anonymised, so that no personal reference can be established. Server log data is deleted after 7 days at the latest.

3. AI visibility scanner

When you enter a domain and optionally a company name in the scanner and start a scan, we transmit this input to our server. The server then retrieves publicly accessible signals of the website you specified (e.g. robots.txt, structure, metadata) and calculates a visibility result from them.

Only the domain you enter and the optional company name are processed.
The anonymous quick scan itself does not store any input permanently and creates no profiles. Permanent storage only occurs if you voluntarily request the full report afterwards (see section 4).
The technical request to our server temporarily appears in the server logs described in section 2.

The legal basis is your usage-oriented request (Art. 6(1)(b) and (f) GDPR).

4. Requesting the full report (lead capture)

If, after the scan, you enter your e-mail address in the form to request the full report, we store the following details in order to handle your request and contact you:

your e-mail address and - where provided - the scanned domain and company name;
the visibility result (score) determined in the scan for that domain;
the time of the request, the consent text you confirmed, and a shortened, non-plaintext (hashed) IP address for abuse prevention.

The legal basis is your explicit consent to be contacted (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). You can withdraw your consent at any time with effect for the future, e.g. by e-mail to datenschutz@aifoundyou.de; the lawfulness of processing carried out before the withdrawal remains unaffected.

This data is stored in a separate database on our server (Hostinger, EU; see section 7), kept apart from other systems. We use it solely to handle your report request and the related contact - not for unsolicited advertising. We retain the data until you withdraw your consent or for as long as it is needed for the business relationship; requests that are not pursued further are deleted after 24 months at the latest.

5. Contact by e-mail

If you contact us by e-mail, we process your details (name, e-mail address, content of the message) solely to handle your request (Art. 6(1)(b) and (f) GDPR). We do not share this data without your consent and delete it once it is no longer required.

6. Cookies, tracking and analytics

This website is cookie-free. To measure reach we use Umami, a privacy-friendly, cookieless web analytics tool that works without personal user profiles and does not share data with third parties for advertising. No profiling for advertising purposes takes place. The legal basis is our legitimate interest in a needs-based design of the website (Art. 6(1)(f) GDPR).

7. Hosting

The website runs on a server at Hostinger (Hostinger International Ltd.) in the EU. A data processing agreement is in place with the hosting provider. Only the data technically required for operation is processed.

8. Disclosure to third parties

We pass your personal data on only to the service providers named in this policy (hosting, payment processing, AI analysis services) where this is necessary to fulfil a contract, you have consented, or we are legally obliged to do so.

9. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection to processing. You can withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority - in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the competent data protection authority. To exercise your rights, contact datenschutz@aifoundyou.de.

10. Changes

We update this privacy policy when our service or the legal situation changes. The version published on this page applies.

11. Payment processing (Stripe)

Paid services are processed via the payment provider Stripe (Stripe Payments Europe, Ltd., Ireland; data may be transferred to Stripe, Inc., USA). Stripe processes the payment data you enter (name, e-mail address, payment method, billing data). We ourselves do not receive or store complete payment details. Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses (Art. 46 GDPR). Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Details: stripe.com/privacy.

12. Use of AI systems for paid analyses

For paid audits and reports we use AI systems as a measurement instrument. In doing so, we transmit the domain to be analysed, the company name and industry-related test prompts via the API service OpenRouter (OpenRouter, Inc., USA) to AI models operated by OpenAI, Anthropic, Google, Perplexity AI and xAI. No further personal data is transmitted. Transfers to the USA are based on standard contractual clauses or the EU-US Data Privacy Framework (Art. 46 GDPR). Under the applicable API terms, the transmitted content is not used to train the models. Evaluation and score calculation are rule-based; results are reviewed before delivery. Legal basis: Art. 6(1)(b) GDPR.