Privacy Policy

1. Data Controller

Philipp Hellwig
Blumenstraße 8, 85777 Fahrenzhausen, Germany
Email: hello@notmydecision.com

2. Data We Collect

When you use the decision service, we collect the following data:

• Name — to personalise your report
• Email address — to deliver your report
• Decision question and context — the content of your submitted decision
• Selected tier and price — for payment processing
• IP address — processed by Cloudflare Turnstile for bot detection (see section 5)

No cookies are set for tracking or advertising purposes.

3. Purpose and Legal Basis

Your data is processed exclusively to provide the service you have ordered — generating an AI-assisted decision report and delivering it by email.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Your data is never shared with third parties for advertising or any other unrelated purpose.

4. Retention Period

Your data is stored in a secured database and deleted no later than 12 months after completion of your order. You may request early deletion of your data at any time by email.

5. Third-Party Processors

We use the following third-party services to operate NotMyDecision. All three are based in the United States (international data transfer). Transfers are made on the basis of Standard Contractual Clauses (Art. 46(2)(c) GDPR) and/or the EU–U.S. Data Privacy Framework.

Anthropic (Claude AI)

Your decision question and context are transmitted to the Anthropic PBC API to generate your report. Anthropic processes this data solely for the purpose of generating the analysis. Privacy policy: anthropic.com/privacy

Gumroad

Payments are processed by Gumroad, Inc. Your name and email address are transmitted to Gumroad as part of the checkout process. Privacy policy: gumroad.com/privacy

Cloudflare Turnstile

To protect the submission form against automated abuse, we use Cloudflare Turnstile. Your IP address is transmitted to Cloudflare, Inc. during this process. Privacy policy: cloudflare.com/privacypolicy

6. Your Rights

Under the GDPR, you have the following rights, which you can exercise at any time by emailing hello@notmydecision.com:

• Access (Art. 15 GDPR) — request a copy of the data we hold about you
• Rectification (Art. 16 GDPR) — correct inaccurate data
• Erasure (Art. 17 GDPR) — request deletion of your data
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our location is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
lda.bayern.de