SmartCompanion
Am Heilholz 38b
83075 Bad Feilnbach
This privacy policy explains which personal data is processed when you visit www.smartcompanion.app, for what purpose and on what legal basis, and which rights you have. It applies to this website and to the MCP server for AI assistants (section 6), not to the SmartCompanion apps and the administration interface, which have their own privacy notices.
Stefan Huber
Am Heilholz 38b
83075 Bad Feilnbach
Germany
Phone: +43 664 54 56 598
Email: hello@smartcompanion.app
No data protection officer has been appointed, as there is no legal obligation to do so. For any questions about data protection, please use the contact details above.
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Each time a page is requested, Netlify automatically processes technical data sent by your browser: IP address, date and time of access, the page requested, referrer URL, browser type and version, and operating system. This data is needed to deliver the website and to keep it secure and stable.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Netlify processes the data on our behalf (Art. 28 GDPR). As Netlify is based in the USA, data may be transferred to the USA. Such transfers are based on the EU-US Data Privacy Framework (Art. 45 GDPR) or the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Log data is deleted automatically after a short period.
This website does not set cookies and does not use any analytics or tracking tools.
If you customise the app preview on the home page (colours, logo, light/dark mode), your settings are kept in your browser's session storage so they survive a page reload. This data never leaves your device and is deleted automatically when you close the browser tab. Storing it is strictly necessary for the feature you explicitly requested (Section 25(2) No. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act).
If you contact us through one of the forms on this website (e.g. contact, demo request, free trial), we process the data you enter: name, email address, optionally your institution, and your message. The forms are sent via the Static Forms service (staticforms.xyz), which receives your details and forwards them to us by email. Your IP address is also transmitted to the service in the process.
If you email us directly, we process your email address and the content of your message.
We use this data solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract (e.g. a trial or demo), and otherwise Art. 6(1)(f) GDPR; our legitimate interest is responding to your enquiry. We delete the data once your enquiry has been fully dealt with, unless statutory retention obligations apply (e.g. if a contract results from it).
The home page embeds content from another server. To display it, your browser connects to the respective provider and necessarily transmits your IP address and technical information about your browser. The legal basis in each case is Art. 6(1)(f) GDPR; our legitimate interest is presenting our content in an appealing and functional way.
The interactive app preview on the home page is loaded from GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. Transfers to the USA are based on the EU-US Data Privacy Framework. More information: GitHub Privacy Statement.
Some project pages show videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the page loads, only a preview image from our own server is shown and no data is sent to YouTube. Only when you click “Play video” is the video loaded in YouTube\'s privacy-enhanced mode (youtube-nocookie.com), and your IP address and technical information about your browser are transmitted to YouTube. Data may be transferred to Google LLC in the USA; such transfers are based on the EU-US Data Privacy Framework. The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); you can withdraw it for the future at any time by reloading the page and not starting the video again. More information: Google Privacy Policy.
Links to other websites, such as the app stores, GitHub or our client references, are plain links. No data is transferred to these providers until you click a link; their own privacy policies then apply.
Customers with a SmartCompanion account can connect AI assistants (e.g. Claude, ChatGPT, Cursor or VS Code) to their audioguide through our MCP server (https://admin.smartcompanion.app/mcp). In doing so, we process:
Access tokens are valid for one day and refresh tokens for 30 days; expired and revoked tokens are deleted regularly. Upload links are valid for one hour, and files uploaded through them are deleted from the upload area after 48 hours; files added to the audioguide remain stored there. Connections can be revoked at any time in the admin under “AI connections”.
The legal basis is Art. 6(1)(b) GDPR (performance of the contract for the use of SmartCompanion). Where audioguide content contains personal data, we process it on behalf of the respective institution (Art. 28 GDPR).
You choose and connect the AI assistant yourself. The respective provider (e.g. Anthropic or OpenAI) processes the content the assistant retrieves or writes, as well as your prompts, under its own responsibility and its own privacy policy; we do not send any data to AI providers ourselves. No personal data of visitors of the audioguide apps is processed through the MCP server. More information: SmartCompanion MCP server.
Under the GDPR, you have the right to
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
To exercise your rights, simply send an informal message to the contact details above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
We update this privacy policy when the website or the legal requirements change. The version published here applies.
Last updated: November 2026
We're happy to tell you everything about SmartCompanion. Get in touch!
SmartCompanion
Am Heilholz 38b
83075 Bad Feilnbach