Privacy Policy

Note: This is a convenience translation. In case of legal disputes, the original German text is binding.

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. For full details, please refer to the German version (legally binding).

2. Data Collection and Storage

Registration: Email, password (encrypted), IP address, timestamp

AI Services: Your prompts and chats are sent to OpenAI (USA), Alibaba Cloud (China), and OpenRouter (USA) for text/image generation

Payment: Stripe (USA) processes payments. Transaction data stored for 10 years (tax law)

Storage: MongoDB (EU region) for data, Hetzner (Germany/EU) for images

Legal Basis: Art. 6(1)(b) GDPR (contract performance)

3. Your Rights (GDPR Art. 15-21)

You have the right to:

  • Access (Art. 15): Request information about your stored data
  • Rectification (Art. 16): Correct inaccurate data
  • Erasure (Art. 17): Delete your account in Settings → Security → Account Management
  • Data Portability (Art. 20): Request data export via support@naryx.app
  • Objection (Art. 21): Object to data processing

Contact: support@naryx.app

4. Hosting & Third Parties

This website is hosted externally. Personal data collected may include IP addresses, contact requests, meta data, and website access data.

AI Services: OpenAI, Alibaba Cloud, OpenRouter, RunPod

Payment: Stripe (EU-US Data Privacy Framework certified)

Analytics: Google Analytics (with IP anonymization, consent-based)

5. Data Controller

Christoph Spitzenberger
Johann-Dreher-Straße 5
82377 Penzberg
Germany

E-Mail: support@naryx.app

6. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority.

Responsible authority for Bavaria:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

Website: https://www.lda.bayern.de/

7. Google Analytics

This website uses Google Analytics with IP anonymization. Storage and use are based on Art. 6(1)(a) GDPR; consent can be revoked at any time via the cookie banner.

8. SSL/TLS Encryption

This site uses SSL/TLS encryption for security. You can recognize an encrypted connection by "https://" in your browser's address bar.

9. Retention Periods

Account data: Until account deletion

Transaction data: 10 years (tax law)

Consent records: 3 years after contract end

Essence credits: 12 months after acquisition

10. Google Fonts (Local Hosting)

This site uses Google Fonts for uniform font display. The fonts are installed locally. No connection to Google servers is established.

11. Changes to this Privacy Policy

We reserve the right to update this privacy policy as needed. Users will be informed of significant changes via email.

Last updated: January 14, 2026