Data Protection Notice
Last updated: 17/05/2026
Controller
The controller responsible for processing your personal data under the GDPR is the freelance operator of cofinance.land: Ned O'Hara, Hofer straße 9, contact@cofinance.land. The operator’s statutory details are also set out in the Impressum.
Data we process
We process: account data (provided via our authentication provider), project and intake requirements, collaborator invites and email addresses, the inputs and outputs of the AI agents, usage and technical log data needed to operate and secure the platform, and payment metadata via our payment provider (we do not store card data ourselves).
Purposes and legal bases (Art. 6 GDPR)
We process data to perform our contract with you and provide the Service (Art. 6(1)(b) GDPR), on the basis of our legitimate interest in operating and securing the platform (Art. 6(1)(f) GDPR), and on the basis of your consent where applicable, for example for non-essential cookies (Art. 6(1)(a) GDPR). You can withdraw consent at any time with effect for the future.
AI processing
To generate suggestions, relevant inputs are sent to third-party AI model providers acting as our processors. The resulting output is automated and non-binding. No decision producing legal effects or similarly significant effects is taken solely by automated means within the meaning of Art. 22 GDPR; suggestions are always reviewed by you and your collaborators.
Processors and transfers
We use third-party processors for authentication, backend hosting, mapping, payments, and AI model inference. We aim to keep personal data in the EU/EEA. Where a processor necessarily processes data outside the EU/EEA, we apply appropriate safeguards such as EU Standard Contractual Clauses and data-minimization practices.
Retention
We keep personal data while your account or project is active and delete or anonymize it on request or after closure, subject to any statutory retention obligations. You can export or request deletion of your data using the tools available in the product.
Your rights (Art. 15–21 GDPR)
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent. You also have the right to lodge a complaint with a competent data-protection supervisory authority. The authority competent for the operator is the Sächsische Datenschutz- und Transparenzbeauftragte, Postfach 11 01 32, 01330 Dresden (Besucheradresse: Maternistraße 17, 01067 Dresden).
Contact
For privacy requests, contact privacy@cofinance.land or use the support channels available in the product.