This is a summary of our privacy policy provided for convenience. The complete and authoritative German version is available at calcora.io/datenschutzerklarung. Status: October 2026.
Controller
Cypher Technology Analytics GmbH
Neubaugasse 25/1/6, Stiege 1
1070 Vienna, Austria
Email: office@calcora.io
Phone: +43 662 28 28 28
What data we process and why
- Website visits: technical data such as IP address, requested URL, date and time, browser and operating system, to deliver the website securely (Art. 6(1)(f) GDPR).
- Contact and demo requests: the data you enter in our forms or when booking an appointment (e.g. name, company, email, phone, message), to handle your request (Art. 6(1)(b) and (f) GDPR).
- Web analytics: only if you consent in the cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via “Cookie settings” in the footer.
- Calcora software (chat.calcora.io): account and contract data, uploaded plans and project data, results and usage/log data, to provide the software and perform the contract (Art. 6(1)(b) and (f) GDPR). Where uploaded documents contain personal data of third parties for which our customer is the controller, we act as a processor on the customer’s behalf (Art. 28 GDPR).
Service providers we use
- Vercel Inc. (USA) – website hosting and, with your consent, Vercel Web Analytics
- Supabase, Inc. – database/CMS for the website, hosted in the EU (Ireland, on Amazon Web Services infrastructure)
- Close (Elastic Inc.) (USA) – contact forms and CRM
- Calendly LLC (USA) – appointment booking for demos
- Stripe – payment processing
- Google Fonts – fonts are self-hosted and delivered from calcora.io; no connection to Google servers is made and no data is transmitted to Google
- Hetzner Online GmbH (Germany) – servers for the Calcora software; data is stored in data centres in Germany
- AI and cloud providers for the Calcora software: Anthropic (Claude), OpenAI, Google and Amazon Web Services (AWS), as well as Kreo (Kreo Software Ltd., United Kingdom) for AI-based plan analysis via an API. The content required for the analysis (in particular plan content, image and text data) is transmitted to these providers and may be processed on servers in the USA or the United Kingdom.
Transfers to third countries
Some providers are based in the USA or process data outside the EU/EEA. Transfers take place on the basis of an adequacy decision (in particular the EU-US Data Privacy Framework, where the recipient is certified; for the United Kingdom, the EU adequacy decision for the UK), standard contractual clauses of the EU Commission (Art. 46 GDPR) and, where necessary, your explicit consent (Art. 49(1)(a) GDPR). Customers of the Calcora software expressly consent to the transfer of their data to the providers named above, including to the USA and the United Kingdom, when concluding the contract. Please note that the USA may not provide a level of data protection comparable to the EU, and US authorities may be able to access data. We recommend uploading only the documents required and removing personal data that is not needed (e.g. names or contact details in title blocks).
Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. Customer data in the Calcora software is stored for the duration of the contract and deleted after the export period stipulated in our Terms and Conditions, unless statutory retention obligations apply.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Austrian Data Protection Authority (Datenschutzbehörde, www.dsb.gv.at).
Contact
For any questions about data protection, please contact us at office@calcora.io.