Privacy Policy for Checkalyzer

1. Data Controller

The controller within the meaning of the GDPR is:

Dawid Kostka
Altmannsdorfer Straße 104
1120 Vienna
Austria

Email: dk@netcreators.io
Website: https://checkalyzer.com

2. Definitions

Our privacy policy is based on the terminology used by the GDPR. To ensure readability, we explain the most important terms:

• Personal data: Any information relating to an identified or identifiable natural person.
• Processing: Any operation performed on personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.
• Consent: Any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of their personal data.

3. Data Collection and Processing When Using Our Services

a) When Visiting the Website (Server Log Files)

Each time you access our website, our system automatically collects data and information from the visiting computer. The following data is collected:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access was made (referrer URL)
• Browser used and, if applicable, your computer's operating system

This data is processed to ensure smooth connection setup, system security and stability, and for administrative purposes.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in securely and functionally providing our website).

b) When Using the "Quick Check"

When you use our free "Quick Check," we process the following data you provide:

• Your email address
• The business idea you describe and related information

This data is processed to perform the AI-powered analysis and send you the results by email.

Legal basis: Your explicit consent pursuant to Art. 6(1)(a) GDPR, which you provide before submitting the form.

c) When Using "ProCheck" and Registration

The paid "ProCheck" requires registration and payment processing. We additionally process the following data:

• Your name
• Your address (for invoicing)
• Payment information (processed through an external service provider, see Section 4)
• Your password (stored encrypted)

Processing this data is necessary to fulfill the contract with you, provide you with comprehensive analysis, maintain a user account, and comply with our legal accounting obligations.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (compliance with a legal obligation, e.g., invoice retention).

d) Cookie Consent Management

We use a cookie banner that appears on your first visit and requests your consent for optional cookies. Your selection is stored as "checkalyzer.cookiePreferences" in your browser for up to 12 months so we can respect and demonstrate your decision.

• Strictly necessary cookies: Ensure secure operation of our website and cannot be disabled.
• Optional cookies (Analytics & Marketing): Only set if you consent via the banner or later adjust your settings.

Legal basis: Art. 6(1)(f) GDPR for necessary cookies (legitimate interest in secure operation) and Art. 6(1)(a) GDPR for optional cookies (your consent). You can change your decision at any time via the "Cookie Settings" link in the footer.

No Data Sales – No AI Training With Your Data

We want to be absolutely clear:

• We do not sell data. Never. To anyone.
• We do not aggregate business ideas and do not share them with third parties.
• Your ideas are not used to train AI models.

Our business model is the one-time sale of the analysis report – not trading user data. Violating this principle would be the quickest end to our business and fundamentally contradicts our values. Your business ideas belong to you and remain confidential.

4. Data Sharing with Third Parties (Processors)

We only share your data with third parties when legally permitted or with your consent. To provide our services, we use specialized service providers who act as our processors under our instructions and with whom we have concluded a contract pursuant to Art. 28 GDPR.

• AI Analysis (OpenAI): To analyze your business idea, we transmit the content you provide (the idea itself, but not your email address) to OpenAI, L.L.C. servers in the USA. The transfer to the USA is secured by the EU-U.S. Data Privacy Framework or EU Commission standard contractual clauses to ensure an adequate level of data protection. OpenAI is contractually obligated to treat the data confidentially and not use it for training its models unless explicitly agreed otherwise.
• Payment Processing (Mollie): For payment processing for "ProCheck," we use Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. Your payment data (e.g., credit card number, account number) is collected and processed directly by Mollie. We do not store complete payment data. You can find Mollie's privacy policy on their website.
• Hosting: Our website and databases are hosted by a professional hosting provider within the European Union (EU) or European Economic Area (EEA). This ensures your data is subject to the high level of protection under GDPR.

5. Data Retention

We store your personal data only as long as necessary for the purposes for which it was collected or as required by legal retention periods.

• Quick Check data: Your email address and submitted idea are stored for the duration of the business relationship so you can access them upon later registration. You can request deletion at any time by emailing dk@netcreators.io.
• ProCheck data: Your account data remains stored as long as your account is active. After account deletion, your data will be deleted unless legal retention periods (e.g., for invoices) prevent this.
• Server log files: Stored for security reasons for a maximum of 14 days and then deleted.

6. Data Security

We implement comprehensive technical and organizational security measures (TOMs) to protect your data from manipulation, loss, destruction, or unauthorized access. Our website uses SSL/TLS encryption to ensure secure transmission of your data (recognizable by "https://" in the address bar).

7. Your Rights as a Data Subject

You have the following rights regarding your data stored with us at any time. To exercise these rights, an informal notification to us at the email address in Section 1 is sufficient.

• Right of access (Art. 15 GDPR): You can request information about the data we store about you at any time.
• Right to rectification (Art. 16 GDPR): If your data is inaccurate, you have the right to request correction.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data unless legal obligations (e.g., statutory retention periods) or overriding interests on our part prevent this.
• Right to restriction of processing (Art. 18 GDPR): You can request restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You have the right to receive data that we process based on your consent or contract performance in a common, machine-readable format.
• Right to withdraw consent (Art. 7(3) GDPR): If data processing is based on your consent (e.g., when using Quick Check), you can withdraw this consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

Special Note on the Right to Object Under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6(1)(f) GDPR (data processing based on legitimate interests). This applies to us, for example, for the processing of server log files.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Important distinction: This right to object does not apply to data processing that is strictly necessary to fulfill a contract with you. The core processing of your business idea and contact data as part of ProCheck is based on contract performance (Art. 6(1)(b) GDPR) and therefore cannot be objected to.

8. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority, without prejudice to any other remedy.

As we are based in Austria, our lead supervisory authority is:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

If you are located outside Austria, you may also contact the data protection supervisory authority in your country of residence.

9. Updates to This Privacy Policy

We reserve the right to update this privacy policy as needed to ensure it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will apply to your subsequent visits.