Privacy notice (English summary)

Who is responsible (controller)

Assetflow – Inh. Marco Koppenhöfer, Kaiserslauterer Straße 325, 67098 Bad Dürkheim, Germany. Email: marco@profitkonsole.de.

What we process on this website

• Cookieless analytics: we use Vercel Analytics and our own first-party event tracking (hosted on Supabase, EU infrastructure) to understand how the site is used. No advertising cookies, no cross-site tracking, no Google Analytics or Meta pixels.
• Email notification list: if you submit your email address in the "notify me" form on our English pages, we store it for exactly one purpose: to inform you when English onboarding is available and when OTTO opens for your country. No newsletter, no sharing with third parties. You can request deletion at any time by emailing us.
• ChatGPT Ads conversion measurement: if you reach our site through an ad in ChatGPT, OpenAI appends a click reference to the URL. We store it with the page view in our own database (not in your browser) and, if you sign up in the same session, our server reports the sign-up with that click reference to OpenAI so the ad can be credited. No cookies, no OpenAI script on our site, and no email address, name or IP address is shared (legitimate interest, Art. 6(1)(f) GDPR).
• Error tracking: technical errors are logged via Sentry to keep the service working (legitimate interest, Art. 6(1)(f) GDPR).
• App and billing: if you sign up for profitkonsole, account data is processed via Supabase (authentication, EU hosting) and payments via Stripe. Details, including the data processing agreement (AVV) under Art. 28 GDPR, are covered in the German privacy policy and the AVV.
• Connected ad accounts (Google Ads, Meta): inside the app you can connect your Google Ads or Meta ad account so that your advertising costs flow into your profit calculation. Access is strictly read-only (Google Ads API; Meta Marketing API with the ads_read permission) — we never create or change ads. Tokens are stored encrypted; disconnecting deletes them, and you can also revoke access directly in your Google or Meta account settings. On request we also delete the retrieved ad metrics — just email us. profitkonsole's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Sharing of connected ad account data: we do not share, transfer or disclose the data retrieved through the Google Ads API or the Meta Marketing API to any third party. The only exception are the processors we use to operate the application, which act solely on our instructions and for no purpose of their own: Supabase Inc. (database, EU data centre in Stockholm), Vercel Inc. (hosting and functions, EU data centre in Frankfurt) and Trigger.dev (background synchronisation, EU data centre in Frankfurt). Any disclosure beyond this takes place only with your explicit consent or where we are legally required to do so. We do not sell this data and do not transfer it to advertising platforms, data brokers, credit agencies or information resellers. We do not use it for advertising, for creditworthiness assessment, or to train artificial intelligence or machine learning models. Nobody at our company reads this data unless you have explicitly agreed, it is necessary to resolve an issue you reported or for security reasons, or we are legally required to do so. The data is used solely for the user-facing feature of including your advertising costs in your profit calculation.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, email marco@profitkonsole.de.

Full details

Retention periods, legal bases per processing activity, processor relationships and all further details are documented in the German Datenschutzerklärung, which is the authoritative version of this notice.