Privacy Policy
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have regarding your data. We are committed to handling your data responsibly and in accordance with applicable law.
1. Who We Are
The data controller for personal data processed through german-help.com and ai.german-help.com is Alexander Groll, a self-employed individual (Persona Física) registered in Paraguay. References to “we”, “us”, or “Operator” in this Policy refer to Alexander Groll.
2. What Data We Collect and Why
| Category | Data Collected | Purpose | Legal Basis |
|---|---|---|---|
| Account / Registration | Name, email address | Account creation, service access, communication | Contract performance |
| Payment | Transaction amount, date, currency, payment status | Processing purchases, issuing receipts, accounting | Contract performance; legal obligation |
| AI Tutor Session Metadata | Session start/end time, session duration, access pass status | Service delivery, outage compensation, usage verification | Contract performance |
| Booking Data | Name, email, scheduled date and time of lessons | Scheduling and confirming lessons | Contract performance |
| Technical / Log Data | IP address, browser type, access timestamps | Security, fraud prevention, technical troubleshooting | Legitimate interest |
| Tutor Profile Data | Name, photo, video, description text, contact preferences | Publishing tutor listings on the Platform | Consent (tutor submits voluntarily) |
| Communications | Email correspondence | Responding to inquiries, support | Legitimate interest; contract performance |
We do not collect payment card details directly. Card processing is handled entirely by our payment provider (Pagopar), which operates under its own privacy policy.
We do not permanently record or store the spoken or written content of AI tutor sessions beyond what is technically necessary for the session to function in real time.
3. Third-Party Services
To provide our services, we use the following third-party providers. Each processes certain data under its own privacy policy:
| Provider | Purpose | Data Shared |
|---|---|---|
| Pagopar / ITTI USA, LLC | Payment processing | Name, email, transaction data |
| Groq, Inc. | Speech-to-text transcription (AI tutor sessions) | Audio input during active sessions |
| Cartesia AI | Text-to-speech synthesis (AI tutor voices) | Text content during active sessions |
| Cal.com | Lesson booking and scheduling (optional) | Name, email, booking details |
| Hosting / VPS Provider | Server infrastructure | Technical data stored on server |
We select providers that maintain appropriate data security standards. We do not sell your personal data to third parties.
4. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Account data | For the duration of the account, plus 12 months after account closure |
| Payment records | As required by Paraguayan tax and accounting law (typically 5 years) |
| Session metadata | 12 months from the session date |
| Booking data | 12 months after the lesson date | Rectification: You may request correction of inaccurate or incomplete data.
| Tutor profile data | Until the listing is removed or deletion is requested |
| Technical log data | 90 days |
| Email correspondence | 24 months from last contact |
5. Cookies and Tracking
The Platform may use cookies and similar technologies for the following purposes:
- Essential cookies: Required for the Platform to function (e.g., session authentication, access pass verification). These cannot be disabled without breaking core functionality.
- Analytics cookies: Used to understand how visitors use the Platform, in anonymised or aggregated form. You may opt out via your browser settings.
We do not use advertising or tracking cookies for third-party marketing purposes.
6. Your Rights
You have the following rights regarding your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Rectification: You may request correction of inaccurate or incomplete data.
- Erasure: You may request deletion of your personal data, subject to legal retention obligations.
- Restriction: You may request that we limit processing of your data in certain circumstances.
- Objection: You may object to processing based on legitimate interest.
- Portability: You may request your data in a structured, machine-readable format where technically feasible.
To exercise any of these rights, contact us at: info@german-help.com
We will respond to requests within thirty (30) days. There is no charge for reasonable requests.
7. Data Security
We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, loss, or alteration. These include encrypted connections (HTTPS), access controls, and regular security reviews. However, no internet transmission is fully secure, and we cannot guarantee absolute security.
8. International Data Transfers
Our server infrastructure is located in the United States (Secaucus, New Jersey), hosted by Interserver, Inc. Some third-party service providers (e.g., Groq, Cartesia) process data in the United States. We rely on these providers’ security certifications and standard contractual commitments for international data transfers.
9. Children’s Privacy
The Platform is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be published on this page with the updated date. We encourage you to review this page periodically. Continued use of the Platform after an update constitutes acceptance of the revised Policy.
11. Contact and Complaints
For any privacy-related questions or to exercise your rights, contact:
Alexander Groll
Av. Marcial Samaniego, Bella Vista, Paraguay
info@german-help.com
If you are not satisfied with our response, you may lodge a complaint with the competent data protection authority in your country of residence.