Privacy Policy

Teclead Ventures GmbH
Köpenicker Straße 126, Aufgang 1
10179 Berlin, Germany

Managing Directors: Malte Herberg, Tony Schumacher
Phone: +49 30 221 836 13
Email: info@teclead-ventures.de

Manuel Schierenberg
c/o Teclead Ventures GmbH
Köpenicker Straße 126, Aufgang 1, 10179 Berlin, Germany
Email: manuel.schierenberg@teclead-ventures.de

The Process Platform is a B2B application for structured capture, assessment and downstream processing of our customers' business processes. We process personal data for the following purposes:

• Providing user accounts (sign-up, login, profile)
• Running process discovery in the AI-assisted chat, including storage of chat histories
• Optional voice input in process discovery (live transcription of spoken input — see § 11 for details)
• Automated scoring of captured processes and generation of derived outputs
• Communication with you regarding support and contractual matters
• Operation, security and error analysis of the platform

• Account data: name, business email address, company, role
• Authentication data: password hash, session tokens
• Content data: process descriptions you enter in the discovery chat, including any names of colleagues, customers or suppliers mentioned
• Audio and transcript data (only when you actively start voice input): the live microphone signal and the partial / final transcripts derived from it (see § 11)
• Usage data: timestamps, pages visited, process interactions
• Technical access data: IP address, browser type, operating system, referrer

Note on third-party data: If you mention personal data of third parties in the discovery chat (e.g. names of colleagues, clients or suppliers), responsibility for the lawfulness of this disclosure lies with your organisation as the data controller. Please ensure that your organisation has an appropriate legal basis for transmitting such data to our platform.

• Art. 6(1)(b) GDPR (contract performance): for providing the user account and the core platform features (discovery, scoring, output generation).
• Art. 6(1)(f) GDPR (legitimate interest): Our legitimate interest lies in ensuring the operational security of the platform, detecting and resolving technical errors, and preventing misuse. This processing is necessary for these purposes and does not override your interests, as only technical data is affected and the processing serves to protect all users.
• Art. 6(1)(c) GDPR (legal obligation): where tax or commercial retention duties apply.

Providing your email address and a password is contractually required for registration and use of the platform. Without this information, we cannot create a user account or provide the platform.

Providing your name, company and role during onboarding is voluntary, but enables a personalised experience and is recommended for full process discovery functionality.

Entering process descriptions in the discovery chat is required for the core functionality of the platform; you determine the nature and scope of the content you provide.

We engage the following processors under Art. 28 GDPR to operate the platform:

• Supabase Inc. (database & authentication) — 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Data is stored exclusively in the Stockholm region (EU, eu-north-1). Supabase uses Amazon Web Services (AWS) as a sub-processor in the same EU region.
• Vercel Inc. (hosting & edge network) — 340 S Lemon Ave, Walnut, CA 91789, USA. Execution preferred in EU regions.
• Anthropic, PBC (Claude AI model for process discovery and scoring) — 548 Market St PMB 90375, San Francisco, CA 94104, USA. The content you enter in the discovery chat is transmitted to and processed by the Anthropic API.
• Gladia SAS (real-time speech-to-text transcription, only when you actively start voice input) — based in Paris, France. Audio is processed by default in EU data centres (France). See § 11 for details.

Data processing agreements pursuant to Art. 28 GDPR are in place with all named providers, including their respective sub-processor lists. No further third-party disclosures occur.

Vercel Inc. and Anthropic, PBC are based in the USA. Transfers of personal data to the USA occur in particular when using the AI chat (Anthropic).

Vercel Inc. is self-certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission dated 10 July 2023); the transfer is therefore primarily based on Art. 45 GDPR. In addition, we have concluded EU Standard Contractual Clauses (SCC) under Art. 46(2)(c) GDPR.

Anthropic, PBC is, to our knowledge, currently not self-certified under the DPF. Transfers to Anthropic are therefore based on EU Standard Contractual Clauses (SCC) under Art. 46(2)(c) GDPR, supplemented by additional technical and organizational measures (Transfer Impact Assessment).

We point out that despite these safeguards, a residual risk remains with transfers to the USA: under certain conditions, US authorities may request access to data, and EU data subjects may not have effective legal remedies under EU law against such access.

The optional speech-to-text feature (§ 11) is provided by an EU-based processor (Gladia SAS, France). No third-country transfer occurs in connection with this feature.

• Account and profile data: until account deletion by you or by us at contract end.
• Chat content and process data: for as long as the account exists, but no longer than 24 months after last use, unless contractual or legal reasons require longer retention.
• Audio and transcript data from voice input: at Gladia, per the data processing agreement (Gladia's standard retention period is up to 12 months; contractually reducible down to no retention). On our side, transcripts are stored only if you actively send them as a chat message — in that case the chat-content retention above applies.
• Technical logs: a maximum of 30 days, then automatically deleted.
• Data with statutory retention obligation (invoices, contracts): 6 or 10 years pursuant to § 257 HGB and § 147 AO.

The platform uses AI models by Anthropic (Claude) to run process discovery and to compute process scores.

Scoring is carried out automatically based on stored rules and AI-assisted evaluation. It does not produce legal effects on you nor similarly significantly affect you within the meaning of Art. 22(1) GDPR — the results are used exclusively for internal process evaluation at the contracting organisation. Automated decisions with legal effect or comparable impact on individuals do not take place.

Under Anthropic's Commercial Terms, content from the discovery chat is not used by default to train the generally available Claude models. Anthropic retains API requests for up to 30 days for safety and abuse prevention purposes; they are automatically deleted thereafter.

The discovery chat offers an optional voice input. You can activate it by clicking the microphone icon in the input field and disable it the same way. As long as you do not activate the feature, no audio is captured or transmitted.

Activation. On first activation, your browser will additionally ask for permission to access your microphone. Without that browser permission, no transmission occurs. You can revoke any granted permission at any time in your browser settings.

Data processed.

• the microphone audio stream during recording (16 kHz PCM, speech only; not persisted in your browser)
• the partial and final transcripts that Gladia generates from this audio and that are inserted into the platform's input field
• an accompanying vocabulary of company- and process-specific terms (e.g. tool names from our tool database, system names captured in your processes) that improves recognition accuracy; this vocabulary does not contain personal data of third parties

Processor. Gladia SAS, Paris, France. A data processing agreement under Art. 28 GDPR is in place with Gladia. Audio streams are processed by default in data centres within the EU (France). No transfer to third countries occurs in connection with speech transcription.

Retention and model training. We operate the voice feature on a paid Gladia plan. Under Gladia's contractual commitments for that plan, audio and transcript data are not used to train AI models. Gladia's standard retention period is up to 12 months and can be reduced in the data processing agreement. Within the platform itself, transcripts are stored only if you actively send them as a chat message — in that case they are treated like other chat content (see §§ 4, 9).

No biometric processing. We use the audio signal exclusively to transcribe spoken content. No speaker recognition or biometric identification takes place. The processing therefore does not fall within Art. 9 GDPR (special categories of personal data).

Termination. You can end voice input at any time by clicking the microphone icon again. We then send Gladia a stop message and close the audio connection. It is at your discretion whether to subsequently send, edit or discard the transcript shown in the input field.

Legal basis. Art. 6(1)(b) GDPR: voice input is an alternative input method for the contracted discovery function. The processing is necessary to provide the input modality you selected. Because the feature only runs while you actively use it, you can prevent the processing at any time by not activating, or by deactivating, the feature.

We use only strictly necessary cookies and storage mechanisms within the meaning of § 25(2)(2) TDDDG (formerly TTDSG, renamed on 14 May 2024). No consent is required for these.

• Supabase Auth (sb-*): session and refresh tokens, HTTP-only cookies, required to maintain login state.
• NEXT_LOCALE: stores your language preference.
• theme (localStorage): stores your dark/light mode selection.

Tracking, marketing or analytics cookies are currently not in use. Should this change, we will introduce an appropriate consent mechanism and inform you beforehand.

Where we process your personal data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to such processing at any time on grounds relating to your particular situation.

In the event of an objection, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Please address your objection to: info@teclead-ventures.de

In addition to the right to object (§ 13), you have the following rights:

• Access (Art. 15 GDPR) to data stored about you
• Rectification (Art. 16 GDPR) of inaccurate data
• Erasure (Art. 17 GDPR), unless statutory retention obligations apply
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Complaint to a supervisory authority — the competent authority for us is the Berlin Commissioner for Data Protection and Freedom of Information

To exercise your rights, an informal message to info@teclead-ventures.de is sufficient.

We implement appropriate technical and organisational measures under Art. 32 GDPR, including TLS encryption for data in transit, encrypted storage of sensitive data, access and role concepts, and regular review of our processes.

We will update this privacy policy when legal requirements or the scope of the platform change. We will notify you of material changes in good time by email or within the application.