Privacy Policy

TORCHTECHNOLOGY LTD (a private limited company registered in the Republic of Cyprus)

Registered office: 25 Martiou, 27, D. MICHAEL TOWER, Office 105A, Egkomi, 2408 Nicosia, Republic of Cyprus

Email: hello@torchtechnology.de

We only process personal data to the extent necessary to provide our website and services. The processing of personal data is generally only carried out with the user's consent or when processing is permitted by law.

Our website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit our website, information is automatically stored in server log files that your browser transmits to us. This includes: browser type and version, operating system, referrer URL, hostname of the accessing device, time of request, and IP address.

This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR.

When you contact us via the contact form, your details (name, email address, subject, message) are stored for the purpose of processing your inquiry. We will not share this data without your consent.

Processing is based on Art. 6(1)(b) GDPR if your inquiry is related to contract fulfillment or pre-contractual measures. In all other cases, processing is based on Art. 6(1)(f) GDPR.

When you book a paid plan through our checkout, we process the data required to conclude the contract, bill you, and provide access, in particular name, email address, billing address, company and VAT details, selected plan, payment status, and Stripe customer number.

Payments are processed through Stripe. Payment and billing data is transmitted to Stripe and processed by Stripe under Stripe's own privacy information (https://stripe.com/privacy) and, where Stripe acts as a processor, under the Stripe Data Processing Agreement (https://stripe.com/legal/dpa). We do not receive full card or bank details.

The legal bases are Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(c) GDPR for tax and commercial-law obligations, and Art. 6(1)(f) GDPR for fraud prevention and payment security.

Our website does not use cookies for tracking or analytics purposes. Our web analytics (see section 7) also works entirely without cookies. Should this change, we will update this privacy policy accordingly and implement a consent solution if required.

We use the privacy-friendly, cookieless web analytics service Plausible Analytics on this website, operated by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia (EU).

Plausible sets no cookies and stores no personal data. Only aggregated usage data is collected (e.g. pages visited, referrer, browser and device type, country of origin) along with anonymous interaction events (e.g. clicking the demo button, submitting the contact form). IP addresses are processed only transiently, are not stored, and are not shared with third parties; identifying individual visitors is not possible. All data is processed exclusively on servers within the EU.

Processing is based on Art. 6(1)(f) GDPR; our legitimate interest is the statistical analysis of website usage to improve our offering. For more information, see Plausible's data policy: https://plausible.io/data-policy. If you choose "Reject" in the cookie notice, web analytics remains fully disabled in your browser. We do not use advertising services.

This site uses SSL/TLS encryption for security and to protect the transmission of confidential content. You can recognize an encrypted connection by the address bar of your browser changing from "http://" to "https://" and by the lock icon in your browser bar.

You have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as a right to correction or deletion of this data (Art. 15–17 GDPR).

You have the right to request restriction of processing of your personal data (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR).

Where we process your personal data on the basis of Art. 6(1)(f) GDPR (e.g. server log files and web analytics), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). Simply send your objection to hello@torchtechnology.de.

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

TORCHTECHNOLOGY LTD develops and operates its products in conformity with European Union law. Personal data is processed in accordance with the EU General Data Protection Regulation (GDPR), and our services and AI features are designed to align with the EU Artificial Intelligence Act (AI Act).

Where our products generate content using artificial intelligence, that content is transparently identified as AI-generated (for example via C2PA Content Credentials), a human remains in control of what is published, and the systems are operated with appropriate human oversight. We do not use AI for practices prohibited under the AI Act.

Personal data is hosted and processed within the European Union wherever possible. Details on your data-protection rights can be found in the sections above.

The use of contact data published as part of the legal notice obligation for sending unsolicited advertising is hereby objected to. The operator expressly reserves the right to take legal action in the event of unsolicited promotional information, such as spam emails.