Privacy policy

Gateway Labs GmbH

Lechnerstraße 6/1/6
1030 Vienna, Austria

[email protected]

This website is delivered through Cloudflare Pages (Cloudflare, Inc.). To get the page to you, Cloudflare processes technically necessary connection data such as your IP address, the time of the request and your browser's identifier. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

The home page, the industry pages, the imprint and this privacy policy set no cookies, use no analytics or advertising tools and load no content from third parties. The fonts are served by this website itself.

If you pick a language with the switch, your browser remembers that choice locally (local storage). It is not sent to us and can be deleted in your browser settings.

The contact links open WhatsApp. If you message us there, we process your message, your name and your phone number or user name to answer your request (Art. 6(1)(b) GDPR, for general enquiries (f)). WhatsApp's own privacy policy applies to WhatsApp itself.

If you ask us for a website check, we start it on your request (Art. 6(1)(b) GDPR). Our server fetches the publicly reachable pages of your website and measures loading speed itself. Only if that is not possible does Google PageSpeed Insights measure it; Google then fetches your website. We send you the result through the channel you asked on.

We write to selected businesses by post. For this we use the name and business address from the published imprint of their website, and the website's address. The legal basis is our legitimate interest in direct marketing (Art. 6(1)(f) GDPR).

You can object to this use at any time (Art. 21(2) GDPR); we will then stop writing to you. To keep it that way, we permanently record your website's address and the date of your objection on a do-not-contact list.

Customers receive a personal link to a setup page. There you connect your Telegram bot to your assistant; for this your browser calls Telegram (api.telegram.org) directly.

In our database at Supabase, hosted in Germany (EU), we store for each customer: your name, your Telegram user ID, your bot's name, the chosen language, technical details of your website and log entries about setting up your assistant. Access credentials are stored there only encrypted or only for as long as the setup needs them.

In the last step you sign in to OpenAI with your own ChatGPT account so your assistant can work. OpenAI's terms apply to that.

To fulfil our contract (Art. 6(1)(b) GDPR) we process what you send your assistant on Telegram – text, images and voice messages. The messages pass through Telegram. The assistant runs on a server at Hetzner Online GmbH; voice messages are transcribed there, without any further service. To generate replies, your messages are sent to OpenAI and processed there by an AI model through your ChatGPT account; images your assistant creates for your website are made at OpenAI the same way.

Your website's source code is kept at GitHub (GitHub, Inc.), and it is published through Cloudflare Pages. Backups of your assistant – with your chats and every file in its workspace – are kept encrypted at Cloudflare R2.

Some of the services named are run by companies based in the USA, so data may be transferred to the USA. This happens only with the safeguards of Art. 45 or Art. 46 GDPR.

For each assistant we keep seven daily backups; older ones are deleted automatically. An extra backup taken before a restore is deleted after seven days. Names and addresses used for letters to businesses are kept until the end of that letter campaign, at most 12 months after the letter; entries on the do-not-contact list are kept permanently.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Contact us for any of these, most simply by e-mail (details above). You can also lodge a complaint with a supervisory authority; in Austria that is the Datenschutzbehörde (dsb.gv.at).