Legal
Privacy notice for testing
1. Controller and contact
The controller for the website and test service is VICO Ventures UG (haftungsbeschränkt), Münchener Straße 37, 85123 Karlskron, Germany. Privacy enquiries: richard.brauel@vico.ventures.
2. Purpose and scope of testing
We process the contact details and test content you provide to enable access, functions and troubleshooting. Access and a test you request rely on Article 6(1)(b) GDPR; technical security and error analysis rely on Article 6(1)(f) GDPR. Our legitimate interest is a secure, functioning service. Do not enter real guest data, identity documents, health or payment data, or access codes for occupied properties. A data processing agreement for regular guest operations has not yet been concluded.
3. Website, sign-in and local storage
Connections involve technical data such as IP address, time and requested address. Host accounts store an email address, name and password hash. Necessary cookies enable sign-in (up to 30 days), guest access (up to 60 days) and an explicitly chosen language (one year). The app stores language and, where needed, access information locally; the web app may cache files for reopening. These necessary functions fall under Section 25(2) no. 2 TDDDG. No advertising or analytics tracking is built in.
4. AI and recipients
When you use AI functions, Stavor sends your request, relevant test content and, where applicable, uploaded images to Mistral AI. Replies and translations are generated automatically and may be wrong. ViCo operates the infrastructure hosting the website and database. Provider agreements and deletion terms for regular operations are still being completed; no verified zero data retention setting is promised. Stripe, WhatsApp and Telegram require separate setup before use. Real payments and payouts are disabled in the current test.
5. Storage and deletion
Accounts and entered test content remain stored while needed for the ongoing test and until deleted. A uniform automatic deletion period for all operational logs and backups has not yet been verified. Do not rely on automatic deletion after a specific number of days. Send deletion and access requests to richard.brauel@vico.ventures. Deleting a conversation does not automatically delete all account or operational data. Retention periods and contracts must be established before real guest data is used.
6. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction and portability, and may object to processing based on legitimate interests. You may withdraw consent for the future. You may complain to a data protection supervisory authority, in particular Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
Updated: 10 November 2026