Privacy Policy

1. Controller and Contact

The controller responsible for data processing on this website and within the application is:

thalas GmbH
Barckhausstraße 13
60325 Frankfurt am Main
Email: contact@thalas.ai

2. Scope of Privacy

The subject of privacy is personal data. This is information relating to an identified or identifiable natural person (e.g. name, email address, but also IP addresses). This policy explains how we process such data in connection with our web-based Excel add-in thalas extract and our website.

3. Server Location and Hosting (Vercel)

We place great importance on ensuring that your data remains within a secure legal jurisdiction.

Hosting: Our website and the entire application infrastructure are hosted by Vercel Inc.

Data residency: We have explicitly configured our infrastructure so that processing of your data takes place exclusively in the Frankfurt am Main, Germany region (Vercel region fra1).

Security: Data transmission is always encrypted (TLS/SSL encryption).

4. Data Processing by thalas extract (AI Guarantee)

When using thalas extract, we process documents uploaded by you (e.g. balance sheets in PDF format) to extract structured data using artificial intelligence.

No AI training: We expressly guarantee that uploaded documents or content extracted from them will not be used to train, improve, or fine-tune our AI models or those of third parties.

Real-time processing: Documents are held in working memory only for the duration of the extraction process. Immediately after extraction is complete or the session ends, this data is deleted from our processing servers.

5. Visitor Statistics and B2B Identification

To continuously improve our website and measure the success of our marketing activities, we collect information about use of our site.

Cookieless tracking: We use Vercel Web Analytics for statistical analysis. This tool operates entirely without cookies. Visitors are distinguished using anonymized hashes (based on IP address and user agent) that do not allow identification and are deleted daily.

B2B identification (reverse IP): To identify potential business customers, we use methods that match public IP addresses against company directories. This only checks whether a page visit originated from the network of a specific company (e.g. an audit firm). Private IP addresses are filtered out.

6. No Use of Cookies

No cookies are used on our website. Neither technically necessary cookies nor third-party tracking or advertising cookies are employed.

7. Payment Processing (Stripe)

We use Stripe as the payment service provider for subscription billing. When a payment is made, billing data and payment information are transmitted directly to Stripe. We do not have access to full credit card details. Processing complies with the high security standards of the payment card industry (PCI DSS).

8. Your Rights

You have the right at any time to free information about your stored personal data, as well as the right to rectification, restriction, or erasure of such data. You also have the right to lodge a complaint with the competent data protection supervisory authority.

9. Contact for Questions

For questions regarding the collection, processing, or use of personal data, please contact:

Email: contact@thalas.ai
Address: thalas GmbH, Barckhausstraße 13, 60325 Frankfurt am Main