Effective from: July 1, 2026
At Laioutr, protecting your privacy is our top priority. This Privacy Policy explains how we collect, use, protect, and share your personal data when you visit our website or interact with our services. "Personal data," also referred to as "personal information" or "information about you," means any information that identifies you or can be used to identify you, such as your name, address, email address, or business contact details. Terms such as "you," "user," or "customer" refer to any natural person whose data we may process.
I. Name and Contact Details of the Controller
Laioutr GmbH
Münchweilersteig 5
12559 Berlin, Germany
Email: info@laioutr.com
(hereinafter "Laioutr," "we," or "us").
II. Data We Collect
We collect personal data in the following ways:
When you visit our website:
IP address, browser type and version, operating system, referrer URL, date and time of access, and similar technical data (for security and analytics purposes).
When you contact us:
Name, email address, company name, message content, and any other information you voluntarily provide.
When you use our SaaS platform:
Account data (login details, email, company name, role), billing and subscription data, project data, and usage analytics.
Cookies and tracking technologies:
We use cookies and similar technologies to ensure the functionality of our website, analyze traffic, and personalize content. You can control your cookie settings via your browser settings.
III. Purpose and Legal Basis of Processing
We process your personal data for the following purposes and on the basis of the corresponding legal bases under the GDPR:
Purpose
Legal basis
Providing and improving our website and services
Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest)
Responding to contact inquiries
Art. 6(1)(b) GDPR
Managing accounts and subscriptions
Art. 6(1)(b) GDPR
Sending marketing communications (with consent)
Art. 6(1)(a) GDPR
Ensuring IT security and fraud prevention
Art. 6(1)(f) GDPR
Fulfilling legal obligations
Art. 6(1)(c) GDPR
IV. Use of Third-Party Services
We may engage trusted service providers that process data on our behalf ("processors"), such as:
Hosting & infrastructure: Vercel, Supabase, Cloudflare
Payments: Stripe
Analytics: Google Analytics, Plausible
CRM & support: HubSpot, Atlassian
Email communication: Mailgun
AI & agent services: Anthropic (Claude)
These providers are carefully selected, GDPR-compliant, and bound by data processing agreements (Art. 28 GDPR).
V. Use of the Laioutr Connector with AI Assistants
Laioutr provides a connector (an MCP-based interface) that lets you access and manage your Laioutr projects using third-party AI assistants, such as Anthropic's Claude. When you enable and use this connector, the following applies:
Data recipient: When you trigger actions via the connector, the provider of the AI assistant, Anthropic, PBC ("Anthropic"), receives and processes the data required to carry out the requested action. In doing so, Anthropic acts as a processor on our behalf and/or as a processor engaged by you as the triggering user.
Data categories: Depending on the actions you trigger, this may include account data (e.g., project identifiers, user role), project and configuration data, page and section content, and the parameters and results of the tool calls you trigger.
Purpose and legal basis: Processing takes place to carry out the actions you request via the connector (Art. 6(1)(b) GDPR, performance of a contract) and, where applicable, to provide and improve the connector functionality (Art. 6(1)(f) GDPR, legitimate interest).
User-initiated and revocable: Data is transmitted to the provider of the AI assistant only as a result of actions you actively trigger; without such an action, no data is shared via the connector. You can disconnect at any time via your account or the settings of the AI assistant, which ends any further processing through this channel.
Transfer to third countries: Anthropic is based in the United States; such transfers are safeguarded as described in the section on data transfers outside the EU/EEA.
VI. Data Transfers Outside the EU/EEA
Where personal data is transferred to countries outside the European Union (EU) or the European Economic Area (EEA), we ensure appropriate safeguards, such as EU Standard Contractual Clauses (SCCs), to protect your data.
VII. Retention Period
We store personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Once the retention period expires, the data is securely deleted or anonymized.
VIII. Your Rights Under the GDPR
As a data subject, you have the following rights:
Right of access (Art. 15 GDPR): to obtain information about the data we process about you.
Right to rectification (Art. 16 GDPR): to have inaccurate or incomplete data corrected.
Right to erasure (Art. 17 GDPR): to request the deletion of your data.
Right to restriction of processing (Art. 18 GDPR): to restrict the use of your data.
Right to data portability (Art. 20 GDPR): to receive your data in a structured format.
Right to object (Art. 21 GDPR): to object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent (Art. 7(3) GDPR): at any time with effect for the future.
To exercise your rights, contact us at info@laioutr.com. You also have the right to lodge a complaint with a supervisory authority, e.g., the Berlin Commissioner for Data Protection and Freedom of Information.
IX. Security of Your Data
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include encryption, access controls, regular audits, and a secure hosting infrastructure.
X. Cookies and Tracking Technologies
Our website uses essential cookies to enable functionality and session management. We also use analytics cookies to measure traffic and improve the user experience. You can manage or disable cookies via your browser settings.
XI. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The current version is always available at www.laioutr.com/privacy. We encourage you to review this policy regularly.
XII. Contact
If you have any questions or concerns about this Privacy Policy, please contact us:
Laioutr GmbH
Münchweilersteig 5
12559 Berlin, Germany
Email: info@laioutr.com