Short and honest: what goes where. This short version applies to this website and the intro call. The full, client-ready version is currently being prepared with legal counsel.
This is a courtesy translation. The legally binding version is the German one.
Jay Manuzon
AIVantum · Dein eigener Tomo
Mohnweg 75
51371 Leverkusen
Germany
jay@aivantum.com
Your files, notes and the running context of your work stay in your environment. Your Tomo works on what you give it.
Whatever the AI processes runs via Anthropic, the provider of Claude, under their terms. We are transparent about what this touches in each case.
Your Tomo only mirrors what you deliberately hand it. It does not reach into other systems on its own. You provide, it works, you approve.
If you use the contact form, we process the data you provide (name, e-mail address, the context you select and your message) in order to answer your enquiry and prepare an intro call. Your form data is transmitted technically via Cloudflare Workers (Cloudflare, Inc.) and the e-mail delivery service Resend (Resend, Inc., USA — Data Privacy Framework, data processing agreement); you receive a short confirmation e-mail to the address you provide. Both services only deliver — they do not analyse anything.
The legal basis is Art. 6(1)(b) GDPR (steps taken prior to entering into a contract) as well as our legitimate interest in answering your enquiry under Art. 6(1)(f) GDPR. We process this data only for as long as necessary to handle your enquiry — specifically, we delete enquiry data no later than 24 months after the last contact, unless statutory retention obligations require otherwise — and we do not pass it on to third parties without your consent.
This website is delivered as a static site via GitHub Pages (GitHub, Inc., USA). In the process, technically necessary server log data (such as IP address, time of access, file requested) are processed to the extent required for secure operation. The legal basis is Art. 6(1)(f) GDPR. Where data are transferred to the USA in this context, we rely on the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR), supplemented by standard contractual clauses in the data processing agreement.
During the ongoing operation of your Tomo, the content you deliberately hand to the AI is processed by Anthropic (the provider of Claude) under their terms. Your Tomo does not reach into other systems on its own. We disclose which data flows your specific setup touches before the start and record this transparently in the intro call.
Anthropic also processes data in the USA. We base this transfer on the EU-US Data Privacy Framework (Art. 45 GDPR) or standard contractual clauses, and we conclude a data processing agreement with Anthropic pursuant to Art. 28 GDPR. Important: the AI does not make any decisions with legal effect concerning you — there is no automated decision-making within the meaning of Art. 22 GDPR. Your Tomo proposes, you approve.
Under the GDPR, you have the following data subject rights:
For any of these, an informal message to jay@aivantum.com is all it takes.
The demo shown on the start page uses placeholders: all names, e-mails, appointments and amounts are invented and do not represent real personal data.