Privacy Policy

Last updated: August 2026

Overview

This policy explains how Cypher Intern (operated by CypherIT Consulting GmbH, "we", "us") handles personal data in connection with this website and the Cypher Intern service. It applies to visitors of this site and to the account and contact data of our customers and their team members. It does not apply to the invoice, vendor, and customer data our business customers upload into their own Cypher Intern account — for that data, our customer is the data controller and we process it only on their instructions, as described in our Data Processing Agreement.

Data Controller

The data controller for this website and for your account, billing, and support data is: CypherIT Consulting GmbH Germany Email: info@cypherit.de For the full registered address and further details, please contact us at the email above.

What Data We Collect

Account data: when you or your company sign up, we collect name, work email, company details, and login credentials. Contact and demo requests: if you use our contact form or request a demo, we collect the information you submit (name, email, company, and your message). Usage and billing data: we process data needed to operate your account, such as team membership, feature usage, and subscription/billing information. Your business data: invoices, vendors, customers, and related documents you upload are processed on your instructions as described above — we act as a processor, not a controller, for that data.

Third-Party Service Providers

We use a small number of service providers to operate Cypher Intern: • Firebase (Google) — for account authentication and login • Stripe — for subscription billing and payment processing If you choose to connect an optional integration (for example Google Drive, Microsoft 365/OneDrive, or SharePoint) to automate invoice handling, that provider will process the data you authorize it to access. These connectors are opt-in — nothing is connected unless you set it up yourself.

Legal Basis for Processing

We process account, billing, and support data to perform our contract with you (Art. 6(1)(b) GDPR). We process technical and security-related data based on our legitimate interest in keeping the service secure and reliable (Art. 6(1)(f) GDPR). Where you choose to connect an optional third-party integration, that processing is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by disconnecting it.

Data Retention

We retain personal data for as long as your account is active and as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you close your account or request deletion, we delete or anonymize personal data within a reasonable period, except where we are required to retain it for legal or regulatory reasons (for example, statutory retention periods for invoicing and accounting records).

Your Rights

Under the GDPR, you have the right to access, correct, delete, or restrict the processing of your personal data, the right to data portability, and the right to object to certain processing. If you're a Cypher Intern user, you can exercise several of these rights directly from within the app, under Settings. You also have the right to lodge a complaint with your local data protection supervisory authority.

Cookies

This website uses essential cookies required for login and core functionality — for example, to keep you signed in. With your consent, given via the cookie banner shown on your first visit, we also use Google Analytics to understand how visitors use this website. Analytics cookies are only set after you accept them, and you can withdraw consent at any time via “Cookie settings” in the footer.

Contact Us

If you have questions about this policy or how we handle your data, please contact us at info@cypherit.de.