Privacy policy

Introduction

The protection of your personal data is important to me. This privacy policy informs you under Art. 13 GDPR which data AgenticCutter processes for purchase, licensing and website use, for what purpose, and on which legal basis. It supplements the general privacy policy at gotzendorfer.at with the product-specific processing carried out by AgenticCutter.

Data Controller

Name

Bernhard Götzendorfer

Address

Rittingergasse 15/11
1210 Wien
Österreich

Email

office@gotzendorfer.at

Payment Processing (Stripe)

Purchasing an AgenticCutter licence is processed via Stripe. Your payment data (card details, billing address, email address) is held exclusively by Stripe and is never transmitted to me in plain text. The legal basis is Art. 6(1)(b) GDPR (performance of the purchase contract). Stripe processes data partly in the USA, a third country under GDPR; the safeguards for this transfer are described below under "International Data Transfer".

Licence Management (Keygen)

To issue and verify your licence, the licensing provider Keygen processes your email address, your licence key, and a machine fingerprint of the devices on which you activate the licence. The fingerprint identifies only the device, not you as a person. Legal basis: Art. 6(1)(b) GDPR (performance of the licence contract).

Licence Data Storage (Supabase)

To fulfil and manage your licence, I store the following data in a dedicated database with the provider Supabase (data held in the EU, Frankfurt region): your email address and its hash value, the Stripe customer, session and subscription identifiers, the Keygen licence identifier, the licence type and status, and the amount paid. Legal basis: Art. 6(1)(b) GDPR (performance and management of the licence contract). The seven-year retention period under § 132 BAO described in the "Retention Periods" section applies to the retention of purchase-related data.

Free Trial

If you request the free trial, I process your email address to create a trial licence through the licensing provider Keygen, or to redeliver an existing trial licence, and to send you the licence key by email (via Resend). Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures taken at your request).

Email Delivery (Resend)

Transactional emails, for example sending your licence key together with the purchase confirmation after purchase, and resending the licence key on request, are sent via Resend. This processes your email address and the content of the respective email. Legal basis: Art. 6(1)(b) GDPR (performance of the purchase contract).

Abuse Prevention (Rate Limiting)

To limit automated abuse, the number of requests per sender is limited for checkout requests and for the trial, licence-key resend and customer-portal endpoints. Your IP address is processed and briefly stored for this purpose exclusively as a SHA-256 hash value; raw IP addresses are not stored. For the email-bound endpoints, a hash value of the email address is additionally used for this limiting. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse and in the stable operation of the purchase flow).

Hosting and Operation (Vercel)

This website is hosted by Vercel Inc. (USA). On page requests, Vercel records standard server logs (IP address, timestamp, URL requested, user agent, status code) to ensure operation. Legal basis: Art. 6(1)(b) GDPR (contract performance, hosting).

Error Monitoring (Sentry)

To detect and resolve errors on this website, error stack traces, the requested URL, the user agent, and technical runtime information are transmitted to Sentry (EU region / Frankfurt). Personal data such as IP addresses or form content is not transmitted. Error events are retained for 90 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in site stability and quality).

Reach Measurement Without Cookies

To improve AgenticCutter, page views, clicks and downloads are counted. This uses Vercel Web Analytics and, for technical page load times, Vercel Speed Insights. The recipient of this measurement data is Vercel Inc. (USA). Counting is aggregated, cookie-free, and does not create personal profiles of individual visitors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in product improvement).

Download Delivery (Vercel Blob)

The AgenticCutter installer files are served from Vercel Blob Storage, a storage service operated by Vercel Inc. Clicking a download link forwards you there. When the file is retrieved, Vercel necessarily receives your IP address and user agent, because no connection can be established without them. Legal basis: Art. 6(1)(b) GDPR (provision of the purchased or trialled software).

Counting Downloads and Update Checks

Downloads and the app's automatic update checks (appcast) are counted server-side so it stays visible how often a version is downloaded and checked. Only aggregated counts are stored, no individual profiles and no attribution to a person. Because these requests run through Vercel's infrastructure, request metadata such as IP address and user agent necessarily arises at Vercel when the request is made. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in product improvement).

Optional AI Frame Assessment in the App (External Providers)

If you select an external AI provider in the AgenticCutter app for the optional AI-assisted assessment of cut pauses, individual still frames extracted from your video material, not the video material itself and not its audio track, are transmitted to the provider you selected for assessment. This also applies when using automatic cut creation (Auto-Cut) if you have selected an external provider for it and have not disabled frame assessment in the settings. An API key stored in the app is saved in your Mac's Keychain and transmitted exclusively to the provider you selected when making a request, never to me; I am not involved in that processing. Without this configuration, processing stays entirely local on your device, and no image, audio or video material leaves your device. Legal basis: Art. 6(1)(a) GDPR (consent given through your active configuration of the external provider). Depending on the provider you select, processing may take place in a third country outside the EU or EEA; that provider's own terms and safeguards apply to it. See §§ 6 and 7 of the Licence Terms (EULA) for details.

Cookies

No cookies are set for reach measurement. This website sets exactly one functional cookie: ac-locale stores your language choice (value “de” or “en”), lasts 365 days, and is only set when you actively switch languages. It contains no identifier that could be used to recognise you or track you across websites. Stripe cookies are not created on this website; they only appear on checkout.stripe.com once you start the purchase process and are forwarded there.

Retention Periods

Purchase-related data such as invoices and payment receipts is retained for seven years under the Austrian tax retention obligation (§ 132 BAO). Licence keys and machine fingerprints are stored for the duration of the active licence and deleted after expiry or revocation, unless a legal retention obligation applies. For the other processing described above, the retention periods of the respective provider apply, as stated in each section.

Your Rights

As a data subject, you have the following rights regarding your personal data: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21).

Contact for Data Protection Requests

For questions about data protection or to exercise your rights, please contact:

office@gotzendorfer.at

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

Name

Österreichische Datenschutzbehörde

Address

Barichgasse 40-42, 1030 Wien

Website

www.dsb.gv.at

Consumers may address data protection complaints directly to the data protection authority named above. The EU Online Dispute Resolution platform (ODR platform) was discontinued by the European Commission on 20 July 2025 and is no longer available.

International Data Transfer

Stripe processes payment data partly in the USA. The transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, the EU Commission adequacy decision (Data Privacy Framework). Keygen, Resend, Vercel and Sentry apply the same safeguards where they process data outside the EU.

Withdrawal and Refunds

You have the right to a full refund within 30 days of purchase without giving a reason. Because AgenticCutter is digital content delivered to you immediately after purchase, the statutory right of withdrawal ends once delivery begins, provided you have explicitly agreed to this and confirmed your acknowledgement that the right of withdrawal is lost. The 30-day money-back guarantee applies independently of this as a voluntary commitment.