Privacy Policy
Last updated: 7 October 2026
This policy explains what personal data we process when you visit processmapai.com, write to us or use ProcessMap AI, why we do it, and what rights you have under the General Data Protection Regulation (GDPR).
1. Who is responsible
The controller is Han Yu, Krankenhausstraße 8, 93449 Waldmünchen, Germany, email support@processmapai.com. ProcessMap AI is run by Han Yu as an individual business. More details are in the Impressum.
2. What we process, why, and on what legal basis
- Visiting the website (IP address, date and time, page requested, browser type): needed to deliver the pages and protect the site against abuse. The public pages are served by Cloudflare; the application at /app is reached through Cloudflare on our server (see section 3). Our server does not write access logs of page visits. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR).
- Visit statistics (page, referring site, country and city, device type, time on page, scroll depth, clicks on outgoing links): our own statistics service, which sets no cookie for this. Visitors are counted with a hash of IP address and browser that is salted with a random value that changes daily and is deleted after two days, so visits cannot be linked across days; IP addresses are not stored. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR).
- First-visit source (cookie
st_ft, only if you click "Accept all"): remembers which site or search brought you here first, so we can see which channels bring people who ask for a trial. Legal basis: your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw it at any time under Cookie settings. - Emails to us (your address, name and message): to answer you and, if you ask for a trial or demo, to set it up. Legal basis: pre-contractual steps and contract (Art. 6 (1) (b) GDPR), otherwise legitimate interest in answering (Art. 6 (1) (f) GDPR).
- Using the ProcessMap AI application (login details we give you, and the content you create or upload: interview transcripts, documents, process models, diagrams and exported specs): stored on our server only to provide the service to you. We do not use your content to train AI models. Legal basis: contract (Art. 6 (1) (b) GDPR). The application is in early access and currently runs in demonstration mode with built-in sample interviews; it does not record or transcribe real interviews yet. Before it does, we will update this policy and name every provider that processes recordings.
- Payments: we do not take payments on this website yet. Before paid plans open, we will name the payment provider here.
If you use ProcessMap AI with personal data of your own clients or employees, we process that data on your behalf. To request a data processing agreement under Art. 28 GDPR, email support@processmapai.com.
3. Service providers and transfers outside the EU
| Provider | What for | Location |
|---|---|---|
| Tencent Cloud | Server that runs the ProcessMap AI application and stores application content | Silicon Valley, United States |
| Cloudflare, Inc. | Hosts the public pages, delivers and protects the site (network, DNS, encrypted connection to our server); runs our statistics service; receives email sent to our address | Global network; company in the United States |
Your data is transferred to the United States. Our application server is located in the United States, so the application and the content you store in it are processed there. We currently use this server only for the invite-only early access, which runs in demonstration mode with built-in sample interviews. Before we process real interview recordings or other customer content there, we will either agree standard contractual clauses with the hosting provider or move the server to the European Union, and update this policy. Cloudflare is certified under the EU–US Data Privacy Framework.
4. Cookies
| Name | Type | Purpose | Duration |
|---|---|---|---|
st_consent | Necessary | Stores your cookie choice ("Accept all" or "Necessary only") | 180 days |
st_ft | Statistics, only with your consent | Source of your first visit | 180 days |
The application at /app uses your browser's built-in login prompt; your browser keeps those login details for the session. We use no advertising or marketing cookies.
5. How long we keep data
- Visit statistics: kept as aggregated, cookie-free records; the daily salt is deleted after two days.
st_ftandst_consent: 180 days in your browser, or until you delete them or change your choice.- Emails: as long as needed to handle your request, and longer only where tax or commercial law requires it.
- Application content: until you delete it or your access ends.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. You can withdraw consent at any time with effect for the future, as easily as you gave it, under Cookie settings. To use your rights, email support@processmapai.com.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority for the private sector (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
7. Children
ProcessMap AI is a business tool and is not intended for anyone under 16.
8. Changes
We update this policy when our services or the law change. The date at the top shows the latest version.