Privacy Policy for the Dashboard

2.1 Registration and account data

During registration and account use, we collect:

• Name
• Email address
• Company name
• Password (stored in encrypted form)
• Date and time of registration

2.2 Usage data in the dashboard

When using the dashboard, technical usage data is generated:

• Login times and session data
• Pages accessed and features used within the dashboard
• Browser type and version, operating system
• IP address

2.3 Payment and billing data

For billing our services, we process:

• Billing address and, where applicable, VAT ID
• Selected plan and contract term
• Invoice history
• Payment data (for self-service customers via Stripe, see section 4.3; for customers who book via Shopify, payment is processed directly through Shopify; for enterprise customers with manual invoicing, directly by us)

2.4 Configuration data and assistant content

As part of setting up your AI assistant, we store configurations you have created, uploaded knowledge-base content (e.g. product data, FAQs) as well as shop connections. This data is not personal data in the strict sense, but rather operational data of your account.

2.5 Assistant usage analytics

The dashboard provides you with pseudonymised analytics and conversation histories of your AI assistant. In standard operation, this data does not contain any personal data of your end customers – conversations are anonymous or pseudonymised. It therefore does not relate to you personally and is mentioned here only for the sake of completeness. This data processing is governed by the DPA.

4.1 Hosting – Vercel

The dashboard is hosted with Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel is certified under the EU-US Data Privacy Framework. We have concluded a DPA with Vercel pursuant to Art. 28 GDPR. Legal basis: Art. 6(1)(b) and (f) GDPR.

4.2 Product analytics – PostHog

To analyse dashboard usage, we use PostHog (PostHog Inc., 965 Mission Street, Suite 401, San Francisco, CA 94103, USA). PostHog records pseudonymised usage interactions within the dashboard (e.g. pages accessed, features used) in order to improve product quality. Individual identification of specific users is not intended. We have concluded a DPA with PostHog. Legal basis: Art. 6(1)(f) GDPR.

4.3 Payment processing – Stripe

For self-service customers, we use Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) for payment processing. Stripe processes payment data independently as a controller in accordance with its own data protection provisions (stripe.com/privacy). We transmit only the data necessary for billing. Legal basis: Art. 6(1)(b) GDPR.

4.4 Database – MongoDB / Google Cloud

Your account, configuration and usage data is stored in a MongoDB database operated via Google Cloud (data centre Frankfurt, Germany). The server location is within the EU, so no third-country transfer takes place. Google Cloud is additionally certified under the EU-US Data Privacy Framework. We have concluded a DPA with Google pursuant to Art. 28 GDPR. Legal basis: Art. 6(1)(b) GDPR.

4.5 CRM & email delivery – HubSpot

To manage customer relationships and to send transactional and marketing emails (e.g. registration confirmations, invoices, product updates), we use HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA). Your contact data (name, email address, company name) as well as communication histories are stored in HubSpot. The transfer of data to the USA is based on the EU-US Data Privacy Framework (DPF), under which HubSpot is certified. We have concluded a DPA with HubSpot pursuant to Art. 28 GDPR. Legal basis: Art. 6(1)(b) GDPR for transactional emails; Art. 6(1)(a) GDPR for marketing emails (only with your consent). Consent for marketing emails can be withdrawn at any time via the unsubscribe link in the respective email or by message to hi@yourhomie.ai.

4.6 Feedback & support – Featurebase

To receive feedback, bug reports and feature requests from our customers, we use Featurebase (Cordnet OÜ, Kaluri tee 4, Viimsi, Harjumaa 74001, Estonia). When you submit feedback via the dashboard, your inputs and your email address are transmitted to Featurebase. The data is stored on servers in Germany; no third-country transfer takes place. We have concluded a DPA with Featurebase pursuant to Art. 28 GDPR. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in product improvement).