Privacy Policy

Introduction

This Privacy Policy explains how Intent (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our service.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller

privacy/design GmbH
Huntloser Str. 20a
26209 Hatten
hello@onintent.build

What Information We Collect

Information You Provide:

• Account Information: Email address, name, and password when you create an account
• Usage Data: Information about how you use our service
• Communication Data: Messages you send to our support team
• Source Code: Repository content you connect for indexing

Information We Collect Automatically:

• Log Data: IP address, browser type, device information, and access times

Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: To provide our service to you (GDPR Article 6.1.b)
• Legitimate Interest: To improve our service and prevent fraud (GDPR Article 6.1.f)
• Legal Obligation: To comply with applicable laws (GDPR Article 6.1.c)

How We Use Your Information

We use your personal data to:

• Provide and maintain our service
• Process your requests and transactions
• Send you service-related communications
• Improve our service and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

Data Storage and Security

Hosting Provider: We use Amazon Web Services (AWS) to host our application and store your data. AWS complies with GDPR requirements and has appropriate security measures in place.

Your data is stored in data centers within the European Union (eu-central-1, Frankfurt).

Security Measures: We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/SSL)
• Access controls and authentication
• Regular security updates and monitoring

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes described in this policy. Once data is no longer needed, it is deleted as soon as possible or upon expiry of any statutory retention obligations.

Your Rights Under GDPR

You have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (“right to be forgotten”)
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at hello@onintent.build.

Data Sharing

We do not sell your personal data. We only share data with:

• Amazon Web Services (AWS): Our hosting provider and AI infrastructure provider, acting as a data processor. All AI models are hosted within the EU (AWS eu-central-1, Frankfurt) via Amazon Bedrock.
  Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg
• Legal Authorities: When required by law or to protect our rights

International Data Transfers

Your data is stored and processed within the EU. AI models are hosted in AWS eu-central-1 (Frankfurt) and your data does not leave the EU for AI processing.

Should any future service integration require data transfer outside the EU, we will ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, Data Privacy Framework) and update this policy accordingly.

Cookies

This website does not use cookies. The Intent application uses only essential session cookies required for authentication — no tracking or analytics cookies are set.

Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify you of significant changes by email or through our service.

Contact Us

For questions about this Privacy Policy or to exercise your GDPR rights, contact us at:

Email: hello@onintent.build
Address: privacy/design GmbH, Huntloser Str. 20a, 26209 Hatten

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with data protection laws.