Privacy Policy

This translation is provided for convenience; the German version is legally binding. Read the German version.

In short: Levytek Agentic OS works on your computer. Projects, knowledge and tasks stay there. For your account, license and updates, we only process what is necessary. This website uses no tracking and no advertising cookies.

1. Controller

2. This website (levytek.ai)

2.1 Hosting and delivery

The website runs on our own infrastructure in Germany. It is delivered via the network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA), which secures the connection and protects against attacks. In doing so, Cloudflare processes technically necessary connection data such as your IP address. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Our own server does not store access logs containing IP addresses; errors are logged without personal data.

Legal basis: Art. 6(1)(f) GDPR (secure and stable operation of the website).

2.2 Sign-in cookie

When you sign in, we set exactly one technically necessary cookie containing a random session ID. It cannot be read by scripts, is only transmitted encrypted, and is deleted when you sign out or after seven days at the latest. For the session, we store your customer number, name, email address and the encrypted access key to your account on our server.

Legal basis: Section 25(2) No. 2 TDDDG, Art. 6(1)(b) GDPR.

2.3 Language cookie and animation setting

If you choose a language at the top of the page or open a link to a specific language version (an address with “?lang=en” or “?lang=de”), we store this choice in a cookie named “lang” (content only “en” or “de”) so the website appears in that language on your next visit. It cannot be read by scripts, contains no identifier and is deleted after one year. If you press “Pause animations” in the navigation, your browser stores this choice locally (localStorage, key “lvt-motion”); it is not sent to us and you can undo it by pressing the button again. Beyond this, we use no cookies, no analytics or advertising services and no external fonts.

Legal basis: Section 25(2) No. 2 TDDDG (a function you explicitly requested).

3. Levytek account and license

For your account and subscription, we process:

• your email address and name, for sign-in and communication,
• your password, exclusively as a bcrypt hash,
• subscription, license and payment status,
• in the app: the license key, a non-reversible identifier of your computer (hash), the computer name and the app version.

This data is stored on our license server in Germany for the duration of the contract. If you delete your account, it is deleted immediately; payment data is anonymized and retained only as long as required by law (Section 147 AO, Section 257 HGB).

Legal basis: Art. 6(1)(b) GDPR (performance of the contract), Art. 6(1)(c) GDPR (retention obligations).

4. The app on your computer

The app stores Project Hub, knowledge, skills, agents and projects locally on your computer. We have no access to them. The app connects to our server only for sign-in, license checks and updates; update checks transmit the app version, platform and your computer’s identifier.

Claude Code and Codex sign in to Anthropic or OpenAI with your own account and send the content they work on to these providers. Anthropic and OpenAI are responsible for this under their own privacy policies; we do not receive this content.

5. Payment processing

Subscriptions are processed via Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, with group companies in the USA). You enter your payment details directly with Stripe; we do not receive full card details, only the payment status and reference numbers. Stripe is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply. Stripe’s privacy notice: stripe.com/de/privacy.

Legal basis: Art. 6(1)(b) GDPR.

6. Contact by email

Cloudflare Email Routing forwards messages sent to [email protected] to our mailbox at Google (Gmail). We use your message only to reply to it.

Legal basis: Art. 6(1)(b) or (f) GDPR.

7. Your rights

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR), immediately and at any time via your account
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

To exercise these rights, write to us at [email protected].

There is no automated decision-making, including profiling (Art. 22 GDPR).

8. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

9. Data security

• Encrypted connections (HTTPS) for the website, account, license and updates
• Passwords only as bcrypt hashes; access keys of website sessions stored encrypted
• Signed updates that the app verifies before installation

10. Changes

We update this Privacy Policy when the legal situation or our offering changes. The version published here applies.