Privacy Policy

Information about how we handle your data

Last updated: January 2026

1. Privacy at a Glance

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

2. Responsible Party

The responsible party for data processing on this website is:

Balane GmbH
Balanstraße 84
81541 München
Germany

Managing Director: Jonas David Höttler
E-Mail: contact@balane.tech

3. Hosting

This website is hosted by Vercel Inc. (San Francisco, USA). When using the website, technical data (IP address, browser type, access time) is recorded in server logs. Data transfer to the USA is based on the EU-US Data Privacy Framework, for which Vercel is certified.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable website delivery).

4. Data Collection on This Website

Website Analytics (Umami)

This website uses Umami, a privacy-friendly, self-hosted website analytics solution. Umami:

Does not collect personal data
Does not use cookies
Does not store IP addresses
Is fully GDPR compliant

Registration / Contact Form

When you register with us or contact us, your information will be stored for processing the request and in case of follow-up questions. This data will not be shared without your consent.

5. External Services

Supabase (Database)

For storing user data, we use Supabase. Data is stored on servers in Frankfurt, Germany (EU).

supabase.com/privacy

Stripe (Payment Processing)

For payment processing, we use Stripe. Stripe is PCI-DSS Level 1 certified. We do not store complete credit card data ourselves.

stripe.com/privacy

Zammad (Support System)

For support requests, we use Zammad, a self-hosted ticket system. When creating a support ticket, your name, email address, and message are stored.

Brevo (Email Delivery)

For sending transactional emails (e.g., registration confirmation, password reset), we use Brevo (formerly Sendinblue). Processing takes place on EU servers. Data processed: email address, name, and email content.

brevo.com/de/legal/privacypolicy

Odoo CRM (Lead Management)

For managing contact requests, we use Odoo CRM. The system is self-hosted on servers in Germany (Hetzner). No data is transferred to third countries.

AI Services (Text Generation)

For optional AI-assisted text generation when creating proposals, the following services may be used: OpenAI (USA), Anthropic (USA), and Mistral AI (France). Usage is voluntary and requires active consent. Data transfer to the USA is based on the EU-US Data Privacy Framework. Only content necessary for text generation is transmitted.

openai.com/policies/privacy-policy

anthropic.com/privacy

mistral.ai/terms/#privacy-policy