Version: 1.0
Last updated: 2026-05-05

JTB UG (haftungsbeschränkt)
Birkenweg 6
66649 Oberthal
Germany
info@werkbook.app

We process personal data in two ways:

• As a controller for our own operations (e.g. accounts, website)
• As a processor on behalf of our customers, who use our service to collect and process data

• Account data (e.g. name, email, postal address, payment information)
• Usage data (e.g. login activity, IP address)
• Communication data (e.g. support requests)

We use a session cookie to maintain login sessions. This cookie is technically necessary for the operation of the service.

Contents submitted via forms including names, locations, signatures, photos, videos and other information.

We process such data on behalf of our customers, who are responsible for the collection and use of this data.

We process personal data to:

• Provide and operate the service (Art. 6(1)(b) GDPR)
• Ensure security and reliability (Art. 6(1)(f) GDPR)
• Communicate with users (Art. 6(1)(b) GDPR)

When acting as a processor, we process data solely on behalf of our customers.

• Our service offers optional AI-based features
• AI processing is performed only when triggered by users
• Data may be transmitted to Anthropic for this purpose
• We do not use customer data to train AI models
• Customers decide whether to use these features

We use service providers to operate our platform, including:

• Render.com (application hosting and database storage)
• Hetzner (object storage for uploaded files)
• Sentry (error monitoring and logging)
• Postmark (email delivery)
• Anthropic (AI processing, optional)
• Customers may also connect third-party integrations (e.g. Dropbox, Microsoft OneDrive).

Personal data may be transferred outside the EU/EEA (e.g. to the United States).

We use appropriate safeguards, including Standard Contractual Clauses (SCCs).

• Data is stored for the duration of the account
• Accounts can be deleted at any time
• Upon deletion, data is removed within 30 days
• Backups are retained for a limited period

We implement appropriate technical and organizational measures, including:

• Encryption in transit (HTTPS)
• Encryption at rest
• Access controls
• Backups

You have the right to:

• Access your data
• Request correction or deletion
• Request restriction of processing, where applicable
• Receive your data in a portable format, where technically feasible
• Lodge a complaint with a supervisory authority

If your data was submitted by one of our customers, please contact that customer directly, as they are responsible for handling your request.

For privacy-related inquiries, contact: info@werkbook.app