Draft – pending legal review
Privacy Policy
Version: October 2026 (draft)
This English version is provided for convenience. The German version (Datenschutzerklärung) is legally binding.
This privacy policy explains, in accordance with Articles 13 and 14 GDPR, which personal data is processed when you use this website (https://plugins.ki-katapult.de) and our plugins for ChatGPT.
1. Controller
Tim Eiko Neunzig, KI Katapult
Alpenstrasse 13
14542 Werder (Havel)
Germany
Email: tim@ki-katapult.de
Phone: +49 163 886 7853
No data protection officer has been appointed, as there is no legal obligation to do so (Art. 37 GDPR, § 38 BDSG).
2. Summary
- The plugins are free of charge. There are no user accounts, no logins and no user database.
- This website sets no cookies and uses no analytics or tracking tools.
- Inputs to the plugins (text and files) are processed only to perform the requested function and are not stored.
- Output files are available for 60 minutes through a signed download link; after that the file itself is deleted.
- Our operational logs contain no content and no IP addresses.
- Our server is located in Germany. We do not transfer data to third countries ourselves.
3. Visiting this website
When you open this website, your browser necessarily sends connection data to our server, in particular your IP address, date and time, the requested page and browser information (user agent). This data is processed only to deliver the page to your device. Our web server does not write access logs.
We do not use cookies or comparable technologies such as local storage, fingerprinting or tracking pixels. We do not store any information on your device. The website loads all its components from our own server only and does not embed content from third parties (such as fonts, scripts or videos from external servers).
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide a website with information about the plugins, support and the legal texts.
4. Using the plugins through ChatGPT
4.1 How it works
You use our plugins inside ChatGPT. When you, or ChatGPT on your behalf, call a plugin function, ChatGPT sends the information required for that function (text and parameters) to our server. Files you provide in ChatGPT are fetched by our server through a time-limited download link that ChatGPT passes with the call. Our server performs the function and returns the result to ChatGPT.
These calls reach us through OpenAI's servers, not directly from your device. We do not receive your IP address in this step.
ChatGPT may attach technical metadata to a call, for example the language setting, an approximate location or a pseudonymous identifier assigned by OpenAI. Our server does not evaluate, log or store this metadata. We do not read or store any OpenAI user identifier. The legal basis for merely receiving this data is Art. 6(1)(f) GDPR; our legitimate interest is operating the plugins through the ChatGPT interface.
4.2 Data processed by each plugin
The data processed depends on the plugin and on your inputs. The following overviews show this for each plugin.
Accessibility Quick Audit
| Data categories | The URL of the audited page The page's public content at the time of the check, which may contain personal data published on that page Short HTML snippets of affected elements, without form field values, in results and the report Answers about the business for the BFSG scope check (sector, consumer-facing, staff count, turnover) |
|---|---|
| Purposes | Running the automated accessibility audit of the page the user chose Running the BFSG scope check Generating the PDF audit report |
| Recipients | Hetzner Online GmbH (hosting provider) |
| Retention | Inputs are not stored: the page is loaded for the duration of the check only No screenshots and no page content are stored Generated report files are deleted after 60 minutes, when their download link expires Logs hold only tool name, outcome, duration and size bucket; no URLs, IP addresses or conversation identifiers |
| Your choices | The user chooses the page and confirms they manage the site One page per request; links are not followed No screenshots are stored The report link expires after 60 minutes, then the file is deleted No account or login is needed |
Bookkeeping Import Check
| Data categories | Booking amounts, booking texts and document numbers Counterparty names contained in booking texts Counterparties' IBANs contained in bank exports; masked in chat responses Advisor and client numbers (business identifiers) |
|---|---|
| Purposes | Checking the bookings file the user uploads against the bookings batch format Repairing the bookings file the user uploads and writing the corrected file |
| Recipients | Hetzner Online GmbH (hosting provider, Germany) |
| Retention | Inputs are not stored; uploaded files exist only in memory while the request runs Corrected files and change reports are deleted after 60 minutes, when the download link expires Logs and metrics record only tool name, outcome, duration and size bucket, never booking content |
| Your choices | The user chooses which file to upload IBANs are masked in chat responses Download links expire after 60 minutes, then the file is deleted No account exists and no sign-in is needed |
DIN 5008 Letter Builder
| Data categories | Names and postal addresses of the sender and the recipient Letter text, which can contain personal details such as health or legal matters (for example an objection to a health insurer) Optional sender contact details, reference numbers and dates typed into the letter |
|---|---|
| Purposes | Laying out the letter to DIN 5008 and rendering it as PDF and/or DOCX for download |
| Recipients | Hetzner Online GmbH (hosting) |
| Retention | inputs: not stored; processed only to render the file outputs: output files deleted after 60 minutes, when the download links expire logs: tool name, outcome, duration and size bucket only; no letter content, names, addresses or IP addresses |
| Your choices | No account and no login Nothing is stored beyond the 60-minute download window Download links expire after 60 minutes; the files are then deleted |
E-Invoice Creator
| Data categories | Names and addresses of seller and buyer Contact persons of the seller (name, telephone number, email address) and electronic invoice addresses VAT IDs, tax numbers and commercial register numbers (legally required invoice content) Bank details (IBAN, BIC, account holder; legally required payment details); masked in chat responses Line items, amounts, invoice numbers, dates and the buyer reference or Leitweg-ID Personal data of sole traders and freelancers contained in their invoice data |
|---|---|
| Purposes | Checking the supplied invoice data for missing or invalid fields Generating the XRechnung or ZUGFeRD file the user requested Validating the generated file against the official rules (KoSIT XRechnung configuration, EN 16931, ZUGFeRD profile, PDF/A-3) before it is delivered |
| Recipients | Hetzner Online GmbH (hosting provider, Germany); generation and validation run in our own containers on that server |
| Retention | Inputs: not stored; invoice data is processed in memory for the duration of the call only, and seller details are not kept between calls Output files: generated invoice files are deleted after 60 minutes, when their download link expires Logs: tool name, outcome, duration and size bucket only; no invoice content, names or IP addresses |
| Your choices | No account or login is needed Nothing is stored after the call; seller details are not kept between calls Download links expire after 60 minutes, then the file is deleted IBANs are masked in chat responses and appear in full only inside the generated file Invoices are not numbered, archived or sent by the plugin |
Holiday Calendar Builder
| Data categories | Event titles, times, places and descriptions, which may contain participant names Region, years and dates off used to look up holidays Uploaded .ics files sent for validation No personal data is required |
|---|---|
| Purposes | Computing the public and school holidays to exclude Building the .ics calendar file and its occurrence preview Checking uploaded .ics files against RFC 5545 |
| Recipients | Hetzner Online GmbH (hosting provider, Germany) |
| Retention | Inputs are not stored; they exist only in memory while the request runs Generated .ics files are deleted after 60 minutes, when the download link expires Logs and metrics record only tool name, outcome, duration and size bucket, never event content |
| Your choices | No account or sign-in exists Leave participant names out of event titles and descriptions The download link expires after 60 minutes, then the file is deleted |
PDF Submission Pack
| Data categories | Whatever you bundle: CVs, certificates, contracts, plans and similar documents Often personal data, and sometimes special categories of personal data (Art. 9 GDPR) such as photos or health certificates Nothing is requested beyond the files you attach |
|---|---|
| Purposes | Checking your files (type, pages, encryption, damage) before building Converting, ordering, page-numbering, bookmarking and compressing them into one PDF Converting to PDF/A-2b and checking PDF/A conformance with veraPDF |
| Recipients | Hetzner Online GmbH (hosting provider, Germany); conversion and validation run in our own containers on that server, files never leave it |
| Retention | Input files are not stored; they exist only in a temporary working directory during the request and are deleted when it ends, on success or failure Output files are deleted after 60 minutes, when the download link expires Logs and metrics record only tool name, outcome, duration and size bucket, never file names or content |
| Your choices | No account or sign-in exists You choose which files to attach; leave out documents you do not want processed The download link expires after 60 minutes; do not share it if the pack contains sensitive documents |
Shift Roster Check
| Data categories | Employee names (or initials) from the uploaded roster; employee personal data for which the employer is controller Employee working times from the roster (dates, start, end, breaks) The German state chosen for public holidays |
|---|---|
| Purposes | Checking the roster against the listed ArbZG rules (§3, §4, §5, §9/§11) Generating one .ics calendar per employee Generating printable week or month rosters as PDF |
| Recipients | Hetzner Online GmbH (hosting provider, Germany) |
| Retention | Inputs are not stored; the roster exists only in memory while the request runs Generated calendar and PDF files are deleted after 60 minutes, when the download link expires Logs and metrics record only tool name, outcome, duration and size bucket, never names or times |
| Your choices | No account or sign-in exists and nothing is stored Use initials instead of full names with name_display "initials" A data processing agreement for employers is available at /avv Download links expire after 60 minutes, then the files are deleted |
Tender Deadline Calculator
| Data categories | Contract type and authority type (works, supplies, services, social services; central, sub-central or sector) Estimated contract value, net of VAT Dates such as notice and invitation dispatch dates and the deadlines put into a calendar German state, used only to include that state's public holidays An optional project name, shown only in the PDF timeline and the calendar file No personal data is needed; the tools have no fields for names, e-mail addresses or contact details |
|---|---|
| Purposes | Checking whether a contract value reaches the EU threshold valid on the given date Calculating the minimum VgV deadlines of a procedure with holiday-aware dates Generating the requested calendar (.ics) and PDF timeline export |
| Recipients | Hetzner Online GmbH (hosting provider, Germany); the PDF is rendered in our own container on that server |
| Retention | Inputs are not stored; they exist only in memory while the request runs Generated calendar and PDF files are deleted after 60 minutes, when the download links expire Logs and metrics record only tool name, outcome, duration and size bucket, never values, dates or project names |
| Your choices | No account or sign-in exists The project name is optional; leave it out and the files carry only deadline names and dates Nothing is stored between calls The download links expire after 60 minutes; do not share them if the timeline should stay private |
Travel Expense Calculator
| Data categories | Traveller name, as shown on the report Travel dates and times, destinations and the places visited Amounts such as kilometres driven and receipts entered (date, category, description, gross amount) No tax ID or bank details are requested; the tools have no fields for them |
|---|---|
| Purposes | Looking up the official per-diem, overnight and mileage rates for the travel dates and places Calculating the allowances per day, the meal deductions and the mileage Generating the requested PDF and CSV report |
| Recipients | Hetzner Online GmbH (hosting provider, Germany); the PDF is rendered in our own container on that server |
| Retention | Inputs are not stored; they exist only in memory while the request runs Generated PDF and CSV files are deleted after 60 minutes, when the download links expire Logs and metrics record only tool name, outcome, duration and size bucket, never names, places or amounts |
| Your choices | No account or sign-in exists Nothing is stored between calls No tax ID or bank details are requested The download links expire after 60 minutes; do not share them if the report should stay private |
XRechnung Validator
| Data categories | Company names and addresses of seller, buyer and delivery recipient Contact persons (name, telephone number, email address) VAT IDs and tax numbers Bank details (IBAN, creditor and mandate references); masked in chat responses Line items, amounts, invoice numbers and dates Personal data of sole traders contained in their invoices |
|---|---|
| Purposes | Validating the submitted e-invoice against the official rules (KoSIT XRechnung configuration, EN 16931, ZUGFeRD / Factur-X profiles, PDF/A-3) Explaining validation findings and rule IDs Summarising the submitted invoice Rendering the submitted XRechnung as a readable PDF |
| Recipients | Hetzner Online GmbH (hosting) |
| Retention | inputs: not stored; uploaded files are processed in memory for the duration of the call only outputs: generated PDF files are deleted after 60 minutes, when their download link expires logs: tool name, outcome, duration and size bucket only; no invoice content, file names or IP addresses |
| Your choices | No account or login is needed Nothing is stored after the call Download links expire after 60 minutes, then the file is deleted IBANs are masked in chat responses |
4.3 Purpose and processing
We process your inputs solely to perform the function you requested. Processing takes place in memory or in a temporary working directory on the server. Inputs are deleted once processing is complete, including when it ends with an error, and are not stored permanently.
We do not use your inputs for any other purpose. In particular, we do not use them to train AI models, we do not build profiles and we do not share them with third parties, except as described in section 7.
4.4 Output files
If a plugin creates a file (for example a PDF or an e-invoice), we place it on our server and provide it through a signed download link. The link is valid for 60 minutes. After 60 minutes the file itself is deleted automatically; the link does not merely expire.
Anyone who has the link can download the file within these 60 minutes. Do not share the link if the file contains confidential content.
When you open the link, your browser (or ChatGPT) connects directly to our server. Your IP address is processed as technically necessary to transfer the file. Neither the IP address nor the link is logged.
4.5 Sensitive data
Our plugins never ask for card data, health data, identity document numbers, personal tax identification numbers or credentials (passwords, API keys). Please do not enter such data.
This is different from information that forms part of a document: the invoice plugins process the tax number or VAT identification number and the bank details because they are mandatory invoice content (§ 14(4) UStG). The bookings plugin processes IBANs contained in bank exports. IBANs are masked in the responses to ChatGPT and appear in full only in the generated file.
The PDF plugin and the letter plugin may also receive content you provide yourself that contains special categories of personal data under Art. 9 GDPR, for example medical certificates in the PDF plugin or an objection to a health insurer in the letter plugin. We process such content only to perform the requested function (for example merging, converting or laying out a letter). We do not analyse the content, we do not store the input, and we delete the output file after 60 minutes. Only provide such documents where necessary for your purpose, and redact information you do not need beforehand.
4.6 Legal bases
- For data relating to you: Art. 6(1)(b) GDPR. Calling a plugin concludes a free-of-charge contract of use; processing is necessary to perform it.
- For data of third parties contained in your inputs (for example names and addresses on an invoice or in a letter): Art. 6(1)(f) GDPR. Our legitimate interest, and yours, is to perform the function you requested. As we do not store inputs and delete results after 60 minutes, the impact on the persons concerned is low.
If you use the plugins as a business or organisation and process personal data of third parties (for example customers or employees), you are the controller for that data and we act as your processor. You can conclude the agreement under Art. 28 GDPR with us using the template at /en/avv.
5. Operational logs
For each call, our server logs only:
- the plugin name
- the name of the function called
- success or error
- processing duration
- an input size bucket (for example "under 1 MB")
- the time of the entry
The logs contain no content of your inputs or results, no file names, no download links, no IP addresses and no identifiers that could be linked to you. In our assessment they do not allow conclusions about your identity.
We use the logs to detect errors, to keep the service stable and to detect misuse. If the logs were to constitute personal data in an individual case, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and stable operation.
The logs are rotated by size: at most two 5 MB files per service; older entries are overwritten automatically.
6. Hosting
The website and the plugins run on a server in Germany operated by us. The server is provided by:
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Hetzner is our processor. A data processing agreement under Art. 28 GDPR is in place with Hetzner. At network level, Hetzner necessarily processes connection data such as IP addresses, for example to defend against attacks. Hetzner has no access to the content processed by our server, except where technically required to operate the data centre.
7. ChatGPT and OpenAI
You reach our plugins only through ChatGPT. ChatGPT is operated by OpenAI (for users in the European Economic Area and Switzerland: OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland).
OpenAI processes your conversation, your inputs and the results our plugins return to ChatGPT under its own responsibility, in accordance with its own terms and privacy policy. In this respect OpenAI is an independent controller; it is neither our processor nor a joint controller with us. We return the results to ChatGPT at your request; the legal basis is the same as in section 4.6. We have no influence on how OpenAI processes, stores or transfers this data to third countries. For details, see OpenAI's privacy policy: https://openai.com/policies/eu-privacy-policy
8. Email contact and support
If you contact us by email, we process your email address, your name (if provided), the content of your message and any attachments in order to answer your request.
The legal basis is Art. 6(1)(b) GDPR where your request concerns the use of the plugins, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering requests.
Our mailbox is operated by hosting.de GmbH, Franzstr. 51, 52064 Aachen, Germany, as our processor.
We delete your request six months after it has been dealt with, unless statutory retention obligations apply.
Please do not include personal data in problem reports (see Support).
9. Recipients
Personal data is received only by:
- Hetzner Online GmbH as processor for hosting (section 6),
- hosting.de GmbH as processor for our mailbox, when you write to us (section 8),
- OpenAI as an independent controller, to the extent you use the plugins in ChatGPT (section 7),
- authorities and courts where we are legally obliged.
10. Transfers to third countries
We process your data on servers in Germany and do not transfer it to countries outside the European Union or the European Economic Area. We return results to ChatGPT; for users in the European Economic Area the recipient is OpenAI Ireland Ltd. in Ireland. Further processing by OpenAI, including in third countries, is governed by OpenAI's own information (section 7).
11. Retention
| Data | Retention |
|---|---|
| Connection data when visiting the website | only for the duration of delivery, not logged |
| Inputs to the plugins | only for the duration of processing |
| Output files | 60 minutes, then the file is deleted automatically |
| Operational logs (no content, no IP) | Rotated by size, at most 10 MB per service; oldest entries overwritten |
| Email requests | six months after being dealt with, beyond that only where retention is required by law |
12. Your rights
Under the GDPR you have the right to:
- access to your data processed by us (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- lodge a complaint with a supervisory authority (Art. 77 GDPR).
As we keep no accounts and do not store inputs, we generally cannot link data to a person. In that case we are not obliged under Art. 11 GDPR to collect additional data merely to comply with your rights. If you provide information that allows identification, we will of course look into your request.
Please send all requests to tim@ki-katapult.de.
Right to object under Art. 21 GDPR
Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time, on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
13. Supervisory authority
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg)
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
https://www.lda.brandenburg.de
You may also contact any other data protection supervisory authority, in particular in the Member State of your residence or place of work.
14. Obligation to provide data, automated decisions
You are under no statutory or contractual obligation to provide data. Without inputs, however, the plugins cannot perform their function.
Some plugins apply fixed rules (for example tax rates or deadlines). They produce results that you check and use yourself. There is no automated individual decision that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).
15. Changes
We update this privacy policy when the plugins, the service providers used or the law change. The version published on this page applies.