Privacy Policy
Last updated: June 2026
Controller
Interaktiv GmbH, Visteonstraße 9, D-50170 Kerpen, Germany, is responsible for processing your data. We have not appointed a data protection officer; for any data-protection request, contact us at: hallo@erasmusplus.ai
What data we process
Account data (email, name, your chosen interface language and country), application content (your project inputs and AI-generated drafts), usage and log data (anonymised or pseudonymised), and payment data processed via Stripe — we never store card numbers.
Purposes and legal bases (Art. 6 GDPR)
We process your data to provide the service: to manage your account and generate your application drafts (Art. 6(1)(b) GDPR, performance of a contract); to process payments and meet statutory tax-retention duties (Art. 6(1)(b) and (c)); to keep the service secure and reliable (Art. 6(1)(f), legitimate interest); and — only with your consent — for product analytics and feedback (Art. 6(1)(a), which you can withdraw at any time).
Your application content
Your project data is stored exclusively on servers we operate in Frankfurt, Germany. Your sign-in credentials are also managed on our own infrastructure via Better Auth, not through external identity providers. We do not sell, share, or transfer your content. Your content is never used to train AI models. Free drafts are automatically deleted after 7 days unless unlocked.
AI processing
To generate text, your inputs are sent to our AI model provider (currently OpenAI) under a data processing agreement that prohibits any use for training. This can involve a transfer to the United States, safeguarded by the EU Standard Contractual Clauses.
Optional analytics and feedback
Only if you opt in, we use pseudonymised product analytics and your optional feedback to improve the service. This is entirely voluntary — you can grant or withdraw your consent at any time in your settings, with no effect on your use of the product.
Web analytics (Google Analytics)
We use Google Analytics 4 (measurement ID G-W9SC0VQPFF), a web-analytics service provided by Google Ireland Ltd. It sets cookies and processes pseudonymised usage data — such as the pages visited and approximate, IP-anonymised location (in GA4 the IP address is truncated by default) — so we can understand how the site is used and improve it. Google Analytics only loads after you have given consent: logged-in users through their privacy settings, anonymous visitors through the cookie banner. You can withdraw your consent at any time, and we never run Google Analytics without it.
Service providers and third-country transfers
We rely on a small number of vetted processors, each under a data processing agreement and only to the extent required: Stripe (payment processing), Google (only if you choose to sign in with Google), and Brevo (transactional email such as verification and reminders). Where a provider processes data outside the EU/EEA — notably Stripe and Google, both based in the United States — the transfer is safeguarded by the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or by the EU Standard Contractual Clauses.
Retention and deletion
We keep your data only as long as necessary: free drafts for 7 days, account and application data until you delete your account, and invoices for the statutory retention period (up to 10 years under German tax law). You can delete your account at any time in your settings.
Cookies
We use technically necessary cookies for authentication and session management — these are required without consent so the service can work. In addition, Google Analytics sets analytics cookies, but only with your consent (see section 7 on web analytics). We do not use advertising cookies.
Your GDPR rights
You have the right to access, correct, delete, restrict, port, or object to the processing of your data, and to withdraw any consent at any time. You can delete your account yourself in your settings, and you may lodge a complaint with a supervisory authority. The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. To exercise your rights, contact: hallo@erasmusplus.ai
Automated decision-making
We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The text suggestions produced by the AI are aids for drafting your application — not legally binding decisions about you.
Changes to this notice
We may update this privacy notice, for example when the legal situation or the services we use change. The current version is always available on this page. For material changes, we will additionally notify you by email.