Privacy Policy — EU

This policy applies to the ccsio.ai website in the EU market and, once activated for your account, to the CCG Inference API.

The controller for this processing is the EU company identified in the “Responsible legal entity” box at the top of this page — its legal name, legal form, registration, address and contact address are stated there; that box is the authoritative identification for this policy on this site.

The policy is a living document; material changes are announced before they take effect.

Website — only data you give us or that your browser reports: waitlist requests (name, work e-mail, detected region, and the attribution parameters that came with your request) and contact-form submissions, processed to answer you and manage the waitlist (Art. 6(1)(f) GDPR, legitimate interest). Aggregate analytics are processed only with your consent (Art. 6(1)(a) GDPR), as described below.

API (once activated) — your inputs and the model outputs: processed in memory to produce the response, and not stored and not used for training unless you have agreed to both in writing (Art. 6(1)(b) GDPR, performance of a contract).

We do not sell personal data, and we do not use it for advertising.

By default we store only what is essential: your region and language preferences and the security state of your session. No cookies are set before you decide.

Aggregate analytics run only after you accept them in the consent banner. You can change or withdraw your consent at any time through the “Privacy settings” control in the footer; the choice is kept in your browser (localStorage, key ccsio.ai:consent:v1) and applies immediately. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR).

Inference and storage for the EU market are in Germany, in the EU region you selected on this site. Your data is not transferred outside the EU for the purpose of processing your requests.

Support requests may be handled by team members elsewhere in the company; support access to your content is explicit, scoped, time-bound and audited. Any transfer of your data outside the EU would be announced to you beforehand and would require your consent.

AI inference is transient: nothing from it is retained once the response is returned. Waitlist entries are kept until launch or until you ask us to delete them, whichever comes first.

You have the rights of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), the right to withdraw consent at any time and the right not to be subject to automated decision-making (Art. 22 GDPR). You also have the right to lodge a complaint with a competent supervisory authority.

To exercise any of these rights, use the contact page; we answer within 30 days.