Privacy & data processing

How Renomo processes your data, the providers involved, where it is stored, and how we meet the GDPR and the EU AI Act.

Who is responsible

The controller is pageBody GmbH, Bahnstr. 12, 65205 Wiesbaden, Germany. Contact for any data question: info@pagebody.de. Company details are in the Impressum. The service is for business users and is not directed to children.

The short version

• The app, its database, and your files run on our own infrastructure in a German Hetzner data center. Core data does not leave the EU.
• The phone interview is run by an AI ("Maya"). You are told it is an AI before it starts, and it records only with your explicit consent.
• Your Blueprint is generated by AI and is advisory. You review and decide. Nothing is posted to your LinkedIn without your action.
• We set no advertising or tracking cookies and run no third-party analytics. Your Blueprint uses your own public profile photo and banner, never AI-generated faces.
• The AI provider that analyses your inputs does not use them to train its models under the API terms we use. Your inputs may be kept briefly by that provider for abuse monitoring.
• Renomo assesses your own profile for your own positioning, never to screen or judge other people. Your interview recording captures your voice for your Blueprint, not to identify you.
• We keep your data only as long as we need it for the service and the law, never indefinitely for its own sake. You can have your account, and everything tied to it, deleted at any time.

What we process, and how it flows

1. Account. Your email (and a password hash) are held by our authentication service, which runs on our own infrastructure in Germany.
2. Your inputs. Your name, LinkedIn URL, phone number, and what you add at review (images, a writing sample, your plan details) are stored in our own database in Germany.
3. Your notes. What you add to your Material log is stored in our own database in Germany, visible only to you, and deleted with your account.
4. Dictation. If you dictate a note, your browser's own speech recognition turns your voice into text. Depending on the browser, its maker may process the audio on its own service: Chrome, for example, sends the audio to a web service for recognition. Renomo never receives your audio, only the text you keep.
5. Your writer foundation. What you tell us about how you write and what you sell, including customers' words you quote with their agreement, is stored in our own database in Germany, visible only to you, and deleted with your account.
6. Drafted posts. When the Desk drafts a post, what you draft it from is sent to our drafting provider; the post and what it was drafted from are stored with it in our own database in Germany, visible only to you, and deleted with your account.
7. Visuals and distribution kits. A photo you attach to a post is stored in our own storage in Germany, visible only to you, never sent to a model, and deleted with the post or your account; a carousel or an infographic is rendered on our own server from text you approved; a Distribution kit is drafted by our drafting provider from your post, the notes and brief it was drafted from, and your foundation, and stored with the post.
8. Your published posts' counts. While you use the Desk, at most once a day, we look up the public reactions, comments and reposts of the posts you marked published, through the same public lookup as your Blueprint, and keep only those counts with each post. We never keep who reacted or what anyone wrote. The counts you add yourself (messages, inquiries, profile viewers, whether you would repeat a post, and your comments and conversations of the week) are stored with them. All of it is stored in our own database in Germany, visible only to you, and deleted with your account.
9. Payment. Handled by our payment processor. We store the outcome, never your card details.
10. Public profile lookup. Once per run, at your instruction, we look up the publicly available information on the LinkedIn profile at the URL you give us, the kind of detail anyone could see on your public profile or find through a web search, and store the result in our German database.
11. Voice interview. An AI interviewer calls the number you provide, placed and voiced by our voice-AI provider. You are told it is an AI and consent to recording at the start. The recording and transcript are stored in our database, and used only to capture your answers and how you speak for your Blueprint, never to identify you biometrically. The provider's copy expires within 30 days.
12. Assessment. Your profile information and interview are analysed by a large-language-model provider to produce your Authority Blueprint. Results are stored in our database.
13. Render. The Blueprint document is rendered on our own servers and stored in our own storage. The link you open is a short-lived signed URL.
14. Email. Sign-up, recovery, and delivery emails, and the weekly prompt if you turn it on, are sent through our email provider.
15. Marketing email. Only if you ask for it. You tick a box, we email you a confirmation link, and nothing is sent until you click it. You can turn it off again at any time in your account, in one step. Your Blueprint, receipts and password resets arrive either way and are not affected.
16. Hosting. Everything above runs on our own infrastructure in a German Hetzner data center.

Service providers

We rely on a small set of service providers (processors) to run the service. We list them here by name or category, with their role and location, and update this list when our providers change. Questions: info@pagebody.de.

• Hetzner for the data center our own infrastructure runs in (EU, Germany).
• Stripe for payment processing (EU entity; for any US transfer, the EU-US Data Privacy Framework).
• ElevenLabs for the AI voice interview: placing the call, voicing Maya, and running the language model behind the live agent on its platform (United States; EU-US Data Privacy Framework where certified, otherwise the European Commission's Standard Contractual Clauses in our data-processing agreement. Its copy of the call is kept at most 30 days).
• Google (the Gemini API) for the large-language-model analysis that produces your Blueprint, and on the Desk for checking and drafting posts: the post you check, and the notes, the passage and the writer foundation you draft from, are sent for that purpose (United States; EU-US Data Privacy Framework); and, when you ask the Desk for an illustration, the one-line theme you type (never your post, your notes or your photo); every illustration carries Google's SynthID watermark and a visible label.
• A web data provider for the automated retrieval (crawling) of the publicly available information on your LinkedIn profile (EU, Czech Republic): once per Blueprint run, and, while you use the Desk, at most once a day for the public counts of the posts you marked published.
• Resend for transactional email (United States entity; EU-US Data Privacy Framework where certified, otherwise the European Commission's Standard Contractual Clauses in our data-processing agreement).

Legal bases (GDPR Art. 6)

• Contract (Art. 6(1)(b)): the processing needed to deliver the Authority Blueprint you ordered (profile capture, interview, assessment, render, delivery).
• Consent (Art. 6(1)(a)): recording the voice interview, sending you marketing email if you asked for it and confirmed it, and the weekly prompt, if you turned it on. You may withdraw any of them at any time, and withdrawing is as easy as giving it.
• Legitimate interests (Art. 6(1)(f)): security, abuse prevention, and keeping the service running.
• Legal obligation: invoicing and tax records.

EU AI Act

• You always know when you are dealing with AI. The voice interview is a conversational AI system. You are informed before the call and consent to it (transparency under Art. 50). The Blueprint and any content suggestions are AI-generated and labelled as such. Posts the Desk drafts are labelled in the app as drafted with AI, and carry a machine-readable mark where our drafting provider supplies one; a post you write and have checked stays your own text. An illustration the Desk makes carries a machine-readable watermark from the image provider and a visible label on the image.
• Risk tier. The service is a limited-risk AI use. It assesses your own profile for your own positioning. It is not for evaluating, screening, or making decisions about other people, and it is not used for any high-risk purpose under the Act (no employment, creditworthiness, biometric identification, or similar decisions).
• Human oversight. Outputs are advisory. You review, edit, and approve them, and nothing is published to your LinkedIn without your action. We make no solely automated decision that produces a legal or similarly significant effect about you (GDPR Art. 22).

International transfers

Core data is hosted on our own infrastructure in Germany and our profile-capture provider is in the EU, so no transfer mechanism is needed there. Our payment, voice-AI, language-model, and email providers are in, or transfer data to, the United States. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses in our data-processing agreements.

How long we keep it

We keep your personal data only for as long as we need it to provide the service, run your account, and meet our legal obligations. We do not keep it indefinitely for its own sake.

• You can delete your account yourself at any time, from the account menu inside the app. Deletion is immediate and cannot be undone. It erases your account and sign-in, your inputs, your runs, interviews, recordings, assessments and delivered Blueprints, your posts, notes and writer foundation, post counts and weekly notes from our systems, including the PDF files, and it withdraws your marketing consent so nothing further is sent to you. You can also ask us to do it for you by emailing info@pagebody.de.
• The voice provider's copy of the call expires within 30 days.
• Invoices and tax records are kept for the statutory retention period under German commercial and tax law (section 147 AO and section 257 HGB), even after your account is deleted, because we are legally required to keep them. GDPR Art. 17(3)(b) provides for exactly this. They hold the amount, the date and the payment reference. They do not hold your Blueprints, and once your account is gone they are no longer linked to your name or your email address in our systems.

Your rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data, and to withdraw consent at any time (GDPR Art. 15 to 22). You may also lodge a complaint with a supervisory authority (for pageBody GmbH, the Hessen data-protection authority, HBDI).

Erasure is self-serve: the account menu inside the app deletes your account immediately. To exercise any of the others, email info@pagebody.de.