Privacy

Privacy Policy

This policy explains what data we process as part of the Quantarah MVP, why we process it, and how long we keep it.

1. Controller

[PASCAL: Firmenname oder vollständiger Name]
[PASCAL: Vollständige Anschrift]
Email: [PASCAL: Datenschutz-E-Mail]

2. Data we process

  • Email address — when you join the waitlist with your explicit consent.
  • Chat messages — for the AI conversation with Tara. The most recent messages of a conversation are cached so Tara can follow along, and expire automatically after that (see “Retention”).
  • Telegram identifier — if you message Tara on Telegram we process your numeric Telegram ID. It anchors your account, your allowance and your conversation. We do not receive your real name or phone number from Telegram.
  • Account and usage data — plan (Free/Plus/Premium), messages and images used, and the current billing period. A paid plan cannot be operated without this.
  • Generated images — images Tara creates for you are stored in our object storage together with technical metadata about their generation.
  • Anonymous session ID — a UUID created on your first visit, technically necessary. No name, no email link without consent. TTL: 90 days.
  • Conversation preferences — things you voluntarily mention in chat (e.g. games, genres, budget). Stored for better conversations. TTL: 90 days.
  • Anonymous usage statistics — via Plausible Analytics: no cookies, no personal data, no cross-site tracking.

3. Purpose of processing

  • Waitlist email: to notify you about the launch and new content.
  • Chat data: to power the AI conversation with Tara.
  • Session and preferences: for conversational continuity.
  • Analytics: anonymous usage measurement to improve the product.

4. Legal basis

  • Waitlist email: Consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
  • Chat processing and session: Legitimate interest in providing the service (Art. 6(1)(f) GDPR).
  • Anonymous analytics: Legitimate interest (Art. 6(1)(f) GDPR) — no personal data processed.

5. Retention

  • Waitlist email: until you withdraw consent or request deletion.
  • Session ID and conversation preferences: 90 days from last activity.
  • Conversation history: a few days from the last message, then deleted automatically. Only the most recent messages are kept, not the whole history.
  • Account and usage data and generated images: for as long as your account exists. Deleting the account deletes them too.
  • Payment records at our payment provider: for the statutory retention periods that apply to them. We cannot delete those records.

6. Your rights

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent with effect for the future
  • Complaint to the competent supervisory authority

On Telegram you can do this right in the chat: /meinedaten shows what is stored, /vergissmich clears only what Tara remembers about you, and /loeschen deletes everything after a confirmation — history, memory, account and the images made for you. A complete copy of your data as a file is available on request.

Privacy requests: [PASCAL: Datenschutz-E-Mail]

Delete my data

Deletes your session data and conversation preferences — and your account if you are registered.

Unsubscribe from waitlist

Remove yourself from the waitlist — your email address will be deleted.

7. Third parties

Your data is not sold. Service providers involved:

  • OpenAI (API): Chat messages are transmitted for AI processing. Per OpenAI API terms, API data is not used for model training.
  • Plausible Analytics: Privacy-friendly, no cookies, no personal data, EU-based servers.
  • Telegram: If you message Tara on Telegram, those messages travel through Telegram's infrastructure. Telegram's own privacy terms apply in addition to ours.
  • Stripe (payments): Payment and subscription management run through Stripe. Payment details such as card numbers never reach us — we only learn whether a plan is active and which one.
  • Higgsfield (image generation): Image jobs are sent to the generation service. Your identifier is not passed along.

All of these process data outside our own systems; the applicable terms and server locations are documented by each provider. [PASCAL: Auftragsverarbeitungsverträge + Serverstandorte]

8. AI transparency

Tara is an AI Creator by Quantarah — not a real person. Conversations are processed by AI systems (OpenAI). Tara does not provide medical, therapeutic, or legal advice.

9. Changes

We will notify you of significant changes by email (if you are on the waitlist) or through a notice on the website.

Last updated: [PASCAL: Stand-Datum] · Imprint