Privacy Policy

1. Controller and Contact Information

This Privacy Policy explains how Afforde AI GmbH (Lohmühlenstraße 65, 12435 Berlin, Germany) and its U.S. affiliate Afforde AI, Inc. (44 Tehama Street, San Francisco, CA 94105, United States) ("Afforde AI", "we", "us", or "our") collect, process, and protect personal data when you visit https://affor.de, request private beta access, or use our AI observability, request auditing, and performance profiling services.

For all privacy and data protection inquiries, contact our Data Protection Officer at: admin@affor.de.

2. Categories of Data Processed

• Business Contact & Beta Onboarding Data: Full name, work email address, organization name, engineering role, and workload specifications submitted when booking an architecture walkthrough or requesting workspace credentials.
• Telemetry & Audit Log Data: Execution traces, request latency metrics, token counts, and sanitized payload metadata transmitted by your configured SDK instances to ingest.affor.de. Client-side PII scrubbing is enabled by default prior to ingestion.
• Technical Connection Data: IP address, TLS handshake metadata, and API authentication audit logs required to maintain service security and rate limiting.

3. Legal Basis for Processing (GDPR Art. 6)

We process personal data in accordance with the European Union General Data Protection Regulation (GDPR): (a) for the performance of pre-contractual and contractual obligations under Art. 6(1)(b) GDPR; (b) for compliance with statutory commercial and tax retention obligations under Art. 6(1)(c) GDPR; and (c) for our legitimate interests in securing our cloud ingestion infrastructure under Art. 6(1)(f) GDPR.

4. Data Residency & Zero Model Training Guarantee

Telemetry data ingested into our European cluster (ingest.eu.affor.de) is stored and processed exclusively within ISO 27001 and SOC 2 certified cloud data centers located in Germany and the European Union. Afforde AI never uses customer telemetry, prompt payloads, or audit logs to train or fine-tune foundation models.

5. Your Rights Under GDPR and CCPA

You have the right to request access, rectification, erasure, restriction of processing, and data portability of your personal data. To exercise these rights, send a request to admin@affor.de.