Privacy Notice

Last updated: July 2026

1. Controller

Rotfuß GmbH, Lessingstraße 7, 74834 Elztal, Germany. Contact: info@paventor.com. Privacy contact: datenschutz@paventor.com.

2. Hosting and security logs

Paventor is hosted by Vercel Inc.. We process timestamps, status codes, request IDs, pseudonymized network attributes and security events to operate and protect the service. Secrets, passwords and full session cookies are not written to application logs.

3. Accounts and workspaces

We process names, email addresses, password hashes, verification state, sessions, workspace roles, preferences and audit records to authenticate users, enforce tenant separation and provide requested services.

4. Email verification and communications

Six-digit verification codes are sent through the configured email provider, stored only as secure hashes and expire after ten minutes. Password reset, invitation and deletion confirmation emails are sent only for the requested workflow.

5. Website analyses

We process submitted public URLs, bounded HTML responses, headers, robots.txt, sitemaps and internal links. Optional Google PageSpeed, Gemini or Microlink requests occur only as part of a selected analysis. Private and local network targets are blocked.

6. Billing

Stripe processes payment details. Paventor stores provider references, product, amount, tax, fee, currency, status, credits and accounting entries. Paventor does not collect card numbers directly.

7. Cookies and local storage

Essential cookies support sessions, security, language and privacy choices. Local storage may retain analysis settings and local anonymous history. Optional partner attribution is disabled until consent and can be withdrawn through Cookie settings.

8. Partner attribution

After consent, a valid referral may create a random click reference and an HTTP-only first-touch cookie for up to 60 days. Partner dashboards expose aggregated counts and totals, not referred customer names, emails or websites.

9. Contact requests

Contact submissions process name, email, category, subject, message, optional reference, language, timestamp and a random internal reference. The address is used as Reply-To, never as the technical sender. Data is retained only as needed to answer the request and meet legal obligations.

10. Legal bases

Processing is based, as applicable, on contract performance, pre-contractual steps, legal obligations, legitimate interests in secure and reliable operations, or consent. Consent can be withdrawn for the future.

11. Retention and deletion

Operational and account data is deleted or anonymized when no longer required. Billing, tax, fraud-prevention and legal-claim data may be retained for the applicable statutory period with normal product access disabled.

12. Rights

Subject to applicable law, data subjects may request access, correction, deletion, restriction, portability and object to processing. Complaints may be submitted to a competent supervisory authority. Contact datenschutz@paventor.com.