AEO Explorer
AEO Explorer is a public demo and portfolio project, not a commercial service. The pages in this section are illustrative only and are not an operative agreement. Do not put real personal or business data into the demo.

Privacy Policy

GDPR-aware skeleton for the kit. Controller: the operator of this instance. Contact/DPO: configure in your deployment (see data-map.md and subprocessors page).

What we process

Account data (name, email), workspace content you create, usage metadata. Legal bases per Art. 6(1) GDPR: contract, legitimate interest, consent where applicable.

Subprocessors & DPA

Hosting (Vercel), database (Turso, EU region), storage (Cloudflare R2), email (Resend), payments (Stripe), AI providers (Anthropic, OpenRouter; retention and no-training settings verified). The full, current list lives at /legal/subprocessors.

A data processing agreement (DPA / AVV) per Art. 28 GDPR, covering the subprocessors above, is available at [link / contact email].

Your rights

Access, rectification, erasure, portability (export available in-app), objection, complaint to a supervisory authority.

Data deletion & retention

Deleting a workspace or your account is scheduled: the data stays recoverable for a 30-day grace period (you can cancel any time), then it is permanently erased. If you need it gone sooner, an in-app “delete my data now” option performs immediate erasure (Art. 17) once you confirm via an emailed link.

Some records are retained after erasure where the law requires or permits it: billing/payment records (Art. 6(1)(c), tax/accounting obligations) and a minimal, pseudonymized security audit trail (Art. 6(1)(f)). Authored content you contributed to a shared workspace remains in that workspace with your identity anonymized (Art. 17(3)).