Privacy policy
What this public preview actually does with data, and what remains to be confirmed.
Preview disclosure. Controller identity, contact details and hosting retention must be confirmed before collecting registrations. This notice is not a claim of completed legal review.
1. Scope and responsible operator
This notice covers the Repwing marketing website, not the separate software application. The supplied operator details are Repwing — Lean Zuschlag and Alexander Colucci, Berlin. Contact: [email protected]. The full postal address, legal role/form and applicable supervisory authority still need confirmation before this notice is complete.
2. Hosting and access data
The site is published through Cloudflare Pages. Delivery and security infrastructure may process your IP address, requested URL, access time, user agent and technical error data. Serving and securing the website is the intended purpose; legitimate interests under Article 6(1)(f) GDPR are the proposed basis, subject to the operator's assessment. Exact service recipients, locations, contracts, safeguards and log retention have not yet been confirmed.
3. Forms and the waitlist
The waitlist form asks for work email, company and sales-team size and records the page language. When you submit it with your consent, these details are sent to our application at app.repwing.de, stored in a database and forwarded as an email to our team so we can contact you about early access (Art. 6(1)(a) GDPR, consent). To limit abuse, the server keeps only a one-way hash of your connection's IP address, never the address itself. An email entered on the homepage is temporarily carried to the waitlist page through sessionStorage and removed when that page reads it.
Service providers: Supabase (database, hosted in Frankfurt, Germany), Vercel (application servers, region Frankfurt, Germany; Vercel Inc. is based in the USA) and Zoho Mail (email, EU data centre). You can withdraw your consent at any time by writing to [email protected]; we then delete your entry.
4. Browser storage and analytics
localStorage stores repwing-consent, your preference on this browser, for up to 180 days, or until you change it or clear site data. sessionStorage may temporarily hold repwing-prefill-email for the form handoff during the current tab session. Google Analytics has no valid measurement ID and is not loaded in this configuration. There are no configured advertising trackers. See the cookie policy or .
Cloudflare Pages delivers this site. Its security features may use essential cookies depending on the enabled configuration; this notice does not assert that a particular security cookie is always present. See Cloudflare cookie documentation.
5. Self-hosted fonts
Manrope and Bodoni Moda font files are served by this website's hosting infrastructure. Loading these fonts does not contact the Google Fonts API or Google's font servers. The font licenses are included with the site's assets.
6. AI demonstrations and automated decisions
The displayed conversations use fictional people and companies. This website does not initiate telephone calls, record audio, connect to a CRM or make decisions about visitors. Any future real-customer pilot needs its own notice, documented consent and provider assessment before use.
7. Retention and international transfers
The browser-storage lifetimes are listed above. Waitlist entries are kept until early access has been arranged or you withdraw consent, at the latest 12 months after your entry. They are stored in Frankfurt, Germany. Vercel Inc. and Supabase Inc. are US companies, so access from the USA cannot be ruled out; the safeguards in their data processing agreements remain to be confirmed by the operator. No analytics retention is configured.
8. Your rights
Where applicable, GDPR provides rights of access, correction, erasure, restriction, portability and objection. Consent can be withdrawn for future processing without affecting prior lawful processing. You may complain to a competent supervisory authority. Requests can be sent to [email protected].
9. Security and voluntary information
Pages are delivered over HTTPS. This preview does not ask for payment details, sensitive data, audio or customer transcripts. Please do not enter such information into the forms. No specific security certification is claimed.
10. Updates and legal reference
Reviewed on 2026-10-15 against the current website configuration. Changes to providers or collection require an updated notice. Legal reference: GDPR, including Articles 13 and 15–21.