Privacy Policy
Last updated 2026-06-15
This policy explains what personal data getAdvantage(“getAdvantage”, “we”) processes when you use getadvantage.app, why, and the rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is the operator of getAdvantage. Full controller and contact details are listed in our Impressum.
What we collect and why
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Account email & hashed password | Create and secure your account | Contract (6(1)(b)) |
| Email submitted to the report unlock (“email gate”) | Unlock your full report and, where you ask, email it to you | Consent (6(1)(a)) |
| Sites/URLs you scan and the resulting scores | Provide the scan, history and benchmark features | Contract (6(1)(b)) |
| Billing data (handled by Stripe — we never see your card) | Process subscriptions and invoices | Contract (6(1)(b)) |
| Aggregate, non-identifying usage events (e.g. “a scan ran”) | Understand and improve the funnel | Legitimate interest (6(1)(f)) |
| A single session cookie | Keep you logged in (strictly necessary — no tracking/ad cookies) | Legitimate interest (6(1)(f)) |
We do not sell your data, run advertising trackers, or build cross-site profiles. Scan results contain only publicly-observable facts about the pages you submit.
Sub-processors
We share data only with the processors required to run the service:
| Processor | Purpose | Region |
|---|---|---|
| Vercel Inc. | Application hosting & content delivery | EU / US |
| Neon Inc. | Managed PostgreSQL database (accounts, scans, billing mirror) | EU |
| Stripe Payments Europe, Ltd. | Subscription billing & payment processing | EU / US |
| OpenAI, L.L.C. | AI perception & copy generation (scan analysis) | US |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | US |
Retention
Account and scan data is kept while your account is active and deleted on request or within a reasonable period after closure. Gate-capture emails are kept until you ask us to remove them. Billing records are retained as required by tax law.
Your rights
You have the right to access, correct, export, restrict and delete your personal data, and to withdraw consent at any time. To exercise any of these, contact us via our Impressum. You may also lodge a complaint with your local data-protection authority.
International transfers
Some processors are based in the United States. Where data is transferred outside the EU/EEA it is protected by the relevant safeguards (e.g. EU Standard Contractual Clauses) offered by those providers.
Changes
We may update this policy as the service evolves; the “last updated” date above always reflects the current version.