Privacy policy
Last updated: 12 November 2026 · Deutsche Version
This privacy policy explains how DigiCode Media processes personal data when you use digicodemedia.com and DigiCode AI (digicodemedia.com/app) or write to us on WhatsApp. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Czech Act No. 110/2019 Coll. on personal data processing.
1. Who is responsible
DigiCode Media s.r.o.
Korunní 2569/108
101 00 Praha 10 – Vinohrady
Czechia
Company ID (IČO): 30258324
Registered in the Commercial Register kept by the Municipal Court in Prague (Městský soud v Praze), file no. C 459147
Email: hello@digicodemedia.com · Phone: +420 773 144 790
We have not appointed a data protection officer, as we are not required to. For any privacy question, write to the email above.
2. What data we process and why
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Showing this website securely | IP address, browser, date and time (server logs) | Art. 6(1)(f) – legitimate interest in a secure, working website |
| Website statistics (no cookies) | Page viewed, where you came from (website or ad link incl. UTM tags), device type, time zone, page language, actions on the page, a daily-changing anonymous code | Art. 6(1)(f) – legitimate interest in knowing which pages and ads work |
| Answering your enquiry, booking calls | Name, email, phone, country, your message, chosen time | Art. 6(1)(b) – steps before a contract |
| WhatsApp chat | WhatsApp number, profile name, messages | Art. 6(1)(b) (your enquiry) and (f) (answering quickly) |
| Free AI Growth Audit | Website address, email | Art. 6(1)(b) |
| DigiCode AI chat and tools | Your messages, project and business details you enter, settings, email (after the free messages), a hashed IP value | Art. 6(1)(b) – providing the service; Art. 6(1)(f) – preventing abuse and keeping free limits fair |
| Your account (email and password or Google sign-in) | Email, hashed password, name, profile picture and Google account ID (Google sign-in only), sign-up and sign-in dates, user ID | Art. 6(1)(b) – providing your account and the service |
| Payments and invoices | Name, email, billing country/address, payment method type and last four digits, payment status | Art. 6(1)(b) (contract) and (c) (tax and accounting duties) |
| Ad launch requests | Name, email, phone, ad texts, platforms, budget and limits, landing page | Art. 6(1)(b) – carrying out your request |
| Website Builder: publishing your website | Name, email, phone, company name, web address, website texts, uploaded logo and photo | Art. 6(1)(b) – providing the service |
| Occasional tips about DigiCode AI by email | Art. 6(1)(f) / your consent; you can object at any time | |
| Measuring our ads (Meta Pixel) | Pages viewed, actions on the page, IP address, browser and device data, cookie ID | Art. 6(1)(a) – your consent in the cookie banner |
We do not sell your data. Our own visitor statistics work without cookies (section 9). Advertising cookies (Meta Pixel) are only used if you agree in the cookie banner (section 10).
3. DigiCode AI (chat, tools, projects)
When you send a message, it is sent together with the recent conversation, your project details, your “My Business” details and your settings to our server (Supabase, servers in Frankfurt, Germany). Our server forwards it to our AI provider Anthropic (Anthropic, PBC, USA), which creates the answer. Under Anthropic’s commercial terms, data sent through its API is not used to train its models.
We store your messages and the answers on our server to provide the service, to prevent abuse and to improve DigiCode AI. To keep the free limits fair we store a one-way hashed value of your IP address, not the IP address itself.
Please do not enter passwords, payment data, health data or personal data of your customers into DigiCode AI. AI answers can contain mistakes; check them before you use them.
4. Your account and “Sign in with Google”
You can create a DigiCode AI account with an email address and password or with “Sign in with Google”. Accounts are managed with Supabase Auth on our server in Frankfurt, Germany. We store your email address, a securely hashed version of your password (we never see or store the password itself), the date you signed up and last signed in, and an internal user ID. Your account is linked to your DigiCode AI usage (number of messages, plan) so that your free messages and your plan apply on every device.
Sign in with Google. If you choose Google, Google shares only basic profile data with us: name, email address, profile picture and Google account ID (Google permissions “openid”, “email” and “profile”). We get no access to Gmail, contacts, Google Drive, Calendar or any other Google data, and never your Google password.
We use this Google user data only to create your account, sign you in, show your name or email in the app and send you account emails (for example a welcome email or a password reset). We do not sell it, do not use it for advertising, do not share it with third parties except the processors named here (Supabase for the account, Resend for account emails) and do not use it to train AI models. DigiCode AI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Account emails (confirmation link, password reset, welcome email) are sent through Resend (Resend, Inc., USA) from hello@digicodemedia.com.
Deleting your account: write from your account’s email address to hello@digicodemedia.com; we delete your account and the linked Google data within 30 days. You can remove DigiCode AI’s access to your Google account at any time at myaccount.google.com/permissions.
5. Ad launch requests and Website Builder
When you approve a campaign with “Launch this campaign”, we store your request (ad texts, platforms, budget, spending limit, start date, landing page and your contact details) on our server and receive a copy by email. We use it to contact you, connect your ad account and set up the campaign. Your ads run on your own Meta, Google or TikTok ad account; these platforms process data under their own privacy policies.
Website Builder: while you create and edit your website, texts, logo and photo stay in your browser. When you click “Publish my website”, we store the website content, logo, photo and your contact details on our server to review and publish the website. The published website is public. We keep it online while your subscription runs and delete it after it ends, unless you ask for earlier removal.
Maps: websites made with the Website Builder can show a Google Map. The map is only loaded after the visitor clicks “Show map”; only then is their IP address sent to Google Ireland Ltd. (Art. 6(1)(a) GDPR – consent by clicking). Google’s privacy policy applies.
6. Contact form, call booking and AI audit
Forms on this website are sent through Formspree (Formspree, Inc., USA), which forwards them to us by email. We also store enquiries and booked calls in our own database (Supabase, Frankfurt) to handle them. Booking confirmations are emailed to you through Resend (Resend, Inc., USA). We use the data only to handle your request.
AI support when we handle enquiries: to answer faster, an AI service (Anthropic, USA) summarises new enquiries, suggests a priority and drafts a reply in your language. Only the details you sent us are used. A person on our team always reviews and decides; there are no automated decisions with legal or similarly significant effect (Art. 22 GDPR). Legal basis: Art. 6(1)(f) GDPR.
7. Payments (Stripe)
Paid plans and one-time purchases are processed by Stripe Payments Europe, Ltd. (Dublin, Ireland). You enter your card or payment details directly with Stripe; we never see or store full card numbers. We receive your name, email address, billing country/address, the payment method type and last four digits, and the payment status. Stripe may transfer data to Stripe, Inc. in the USA under the EU–US Data Privacy Framework and the EU Standard Contractual Clauses. Stripe’s privacy policy also applies.
8. WhatsApp
If you write to us on WhatsApp, the message is delivered via the WhatsApp Business Platform of Meta Platforms Ireland Ltd. (Dublin, Ireland). We store your WhatsApp number, your profile name and the messages in our own database (Supabase, Frankfurt). An AI assistant (Anthropic, USA) answers first; it says that it is an AI when asked. A member of our team can take over the chat at any time, and you can ask for a person whenever you like. If you ask for a call, an offer or personal help, we save your contact as an enquiry.
Please do not send sensitive data (health data, ID or card numbers) via WhatsApp. WhatsApp’s/Meta’s own privacy policy also applies. If you only click a WhatsApp link on our website, WhatsApp (Meta) processes your data under its own privacy policy.
9. Website statistics without cookies
We count visits with our own, privacy-friendly statistics. No cookies are set, nothing is stored on your device for statistics, and no third party is involved. When you open a page, we record: the page, the website or ad link you came from (incl. UTM campaign tags), whether you use a phone or a computer, your browser’s time zone and the page language, and whether you sent the contact form, booked a call, requested the audit or clicked WhatsApp, phone, email or “Try free”.
To count unique visitors per day, a one-way code is calculated from your IP address and browser identifier together with a random value that changes every day and is then deleted. Your IP address itself is never stored, and the code cannot be linked to you or to your visits on other days or other websites. The data stays in our database (Supabase, Frankfurt) and is not shared.
10. Meta Pixel (only with your consent)
If you click “Accept” in the cookie banner, we load the Meta Pixel of Meta Platforms Ireland Ltd. (Dublin, Ireland). It sets cookies (for example “_fbp”) and sends Meta information about your visit: the pages you view, your browser and device, your IP address, and whether you sent a form, booked a call or clicked WhatsApp, phone, email or “Try free”. We use this to measure which of our Facebook and Instagram ads bring enquiries and to show our ads to people who are interested, including visitors of our website.
Meta may combine this data with your Meta account. For collecting and transmitting the data, we and Meta are joint controllers (Art. 26 GDPR, Meta Controller Addendum); Meta is responsible for any further processing. Data may be transferred to Meta Platforms, Inc. in the USA under the EU–US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 5(3) ePrivacy Directive). Without your consent the Pixel is not loaded. You can withdraw your consent at any time via “Cookie settings” at the bottom of the page. Meta’s privacy policy: facebook.com/privacy/policy.
11. Hosting, fonts and libraries
- Hosting: Hostinger (Hostinger International Ltd., EU). The server stores technical log data for security for a short period.
- Fonts: Bunny Fonts (BunnyWay d.o.o., Slovenia, EU) – a privacy-friendly font service without tracking.
- Libraries: the libraries for the phone number field (intl-tel-input) and the app (supabase-js) are hosted on our own server; no third party receives your IP address for them.
12. Data stored on your device
Advertising cookies are only set with your consent (section 10). Apart from that, your browser’s local storage only keeps what is strictly necessary for the function you requested (Art. 5(3) ePrivacy Directive):
- Cookie choice: your answer in the cookie banner (key “dcm_consent”), so we do not ask on every page.
- Language choice: if you pick a language or close the language hint, we remember this (key “dcm_lang”) so we do not ask again.
- DigiCode AI: chats, projects, saved answers, business details, ad and website drafts, settings and – when you are signed in – the login token. When you are signed in, we also keep a copy in your account on our server (Supabase, Frankfurt) so you can see it on every device; only you can access it. Signing out removes it from that browser. You can delete the data at any time in DigiCode AI under Settings → “Delete all chats” or by clearing your browser data.
13. Service providers and transfers outside the EU
We use the following service providers as processors bound by data processing agreements:
- Supabase (database, accounts, servers in Frankfurt) · Hostinger (hosting, EU) · Bunny Fonts (fonts, EU)
- Anthropic, PBC (USA) – AI for DigiCode AI, the WhatsApp assistant and handling enquiries
- Stripe Payments Europe, Ltd. (Ireland) – payments
- Meta Platforms Ireland Ltd. (Ireland) – WhatsApp Business Platform; Meta Pixel only with your consent (joint controller, section 10)
- Formspree, Inc. (USA) – forwarding forms · Resend, Inc. (USA) – emails
- Google Ireland Ltd. – only for “Sign in with Google” and for maps after your click
Transfers to the USA are based on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46 GDPR).
14. How long we keep data
- Enquiries, booked calls and ad launch requests: as long as needed to handle them and for up to 3 years afterwards for possible claims.
- WhatsApp chats: up to 24 months after the last message, unless a contract requires longer.
- Invoices and payment records: as long as tax and accounting law requires (currently up to 10 years).
- DigiCode AI messages on our server: up to 12 months, then deleted or anonymised.
- Website statistics: raw records for up to 13 months.
- Meta Pixel cookie (“_fbp”): up to 90 days; data at Meta according to Meta’s privacy policy.
- Published websites: while your subscription runs; deleted within 30 days after it ends.
- Your account: as long as it exists; deleted within 30 days of your request.
- Server log data: a few weeks.
15. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (Art. 15–21 GDPR). If you gave consent, you can withdraw it at any time. Write to hello@digicodemedia.com.
You also have the right to lodge a complaint with a supervisory authority, in particular the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz) or the authority in your country.
16. Changes to this policy
We update this policy when our services change. The current version is always available on this page.