Privacy Policy

Last updated: March 24, 2026

1. Data Controller

The data controller responsible for data processing on this website is:

Interstitial AI GbR
Fraunhoferstrasse 39, 80469 Munich
Email: info@interstitial-ai.com

We are not legally required to appoint a Data Protection Officer (DPO) under §38 BDSG. For all privacy-related inquiries, please contact us at the email address above.

2. Overview

This privacy policy explains how Interstitial AI collects, uses, and protects your personal data when you visit our website at https://interstitial-ai.com, use our web application at https://app.interstitial-ai.com, or interact with our Revit plugin.

We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting & Infrastructure

Our website is hosted on Cloudflare Pages (Cloudflare, Inc., US). When you visit our site, Cloudflare may process your IP address, browser type, and request data to deliver the page and protect against malicious traffic. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and efficient website delivery). See the Cloudflare Privacy Policy.

Videos are delivered via Cloudflare Stream. Video playback data (IP address, device info) may be processed by Cloudflare to deliver video content. The legal basis is Art. 6 (1) (f) GDPR.

4. Cookies & Tracking Technologies

What are cookies?

Cookies are small text files stored by your browser on your device. They enable us to recognize your browser upon revisiting our website and improve your experience.

Essential cookies

We use only essential cookies required for website functionality, security, and your consent preferences. The legal basis is §25 Para. 2 TDDDG and Art. 6 (1) (f) GDPR (legitimate interest).

Consent management

We use a consent management tool that allows you to grant, withdraw, and manage cookie preferences. Data collected by the consent tool includes: date and time of consent, browser and device details, anonymized IP address, and your opt-in/opt-out choices. The legal basis is §25 Para. 1 TDDDG and Art. 6 (1) (c) GDPR (legal obligation to document consent).

Managing cookies in your browser

You have full control over cookie usage. Disabling cookies may impact website functionality. To manage cookies:

5. Analytics

Google Analytics

We use Google Analytics (Google Ireland Ltd. / Google LLC, US) to analyze website traffic and improve our content. Google Analytics is only loaded after you have given consent via our consent management tool. Data collected includes:

  • IP address (anonymized in the EU).
  • Browser and device details.
  • Referrer URL.
  • Click paths and interactions.

The legal basis is Art. 6 (1) (a) GDPR (consent) in conjunction with §25 Para. 1 TDDDG. You can revoke consent at any time via our consent management tool or by using the Google Analytics Opt-out Browser Add-on.

For details, see the Google Privacy Policy and Google Cookies & Technologies.

Google Tag Manager

We use Google Tag Manager to manage analytics tags. The Tag Manager itself does not store cookies or process personal data, but it may activate tags that do (subject to your consent choices).

6. Payment Processing

We use Stripe (Stripe, Inc., US / Stripe Payments Europe, Ltd., Ireland) to process subscription payments. When you subscribe to a paid plan, Stripe processes:

  • Name, email address, and billing address.
  • Payment card details (entered directly into Stripe’s PCI-compliant interface — card data never reaches our servers).
  • Transaction amounts, IP address, and device information.

The legal basis is Art. 6 (1) (b) GDPR (contract performance) for payment execution, Art. 6 (1) (c) GDPR (legal obligation) for tax and financial record-keeping, and Art. 6 (1) (f) GDPR (legitimate interest) for fraud prevention.

Transaction records are retained for 10 years as required by German commercial and tax law (§147 AO, §§238, 257 HGB). See the Stripe Privacy Policy.

7. Contact Forms

Our contact form is processed via FormSubmit, which forwards your message (name, email, subject, message) to our inbox via email. FormSubmit does not persistently store your data. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries).

8. Job Applications

When you apply via our application form, we collect: name, email, phone number, location, position of interest, professional profiles (LinkedIn, portfolio, GitHub), CV, optional cover letter, and your motivation statement. Documents are forwarded to our inbox via FormSubmit.

This data is processed solely for evaluating your application. The legal basis is §26 (1) BDSG in conjunction with Art. 88 GDPR (employment relationship). Application data is retained for up to 6 months after the conclusion of the hiring process (in accordance with AGG claim periods) and then deleted, unless you consent to longer retention for future opportunities (Art. 6 (1) (a) GDPR).

9. Newsletter

You can subscribe to our newsletter to receive product updates and news. We collect your email address for this purpose. You can unsubscribe at any time using the link in each email or by contacting us. The legal basis is Art. 6 (1) (a) GDPR (consent).

10. Social Media

Our website contains links to our profiles on LinkedIn, Instagram, and X (Twitter). These are standard links — no social media plugins or tracking pixels are embedded on our website. When you click a social media link, you leave our site and the respective platform’s privacy policy applies.

See: LinkedIn Privacy Policy, Instagram Privacy Policy, X Privacy Policy.

11. Web Application

Our web application at https://app.interstitial-ai.com processes additional data required to deliver the service, including:

  • Account information (email, display name).
  • Project data (uploaded images, settings, generated content).
  • Usage data (credit consumption, generation history).

Project data is stored in Cloudflare R2 (private, no public access). Our database is hosted in a European region (eur3). The legal basis is Art. 6 (1) (b) GDPR (contract performance). We do not use your data to train AI models.

12. Revit Plugin

The Interstitial AI Revit Plugin collects data necessary for authentication and synchronization, including user credentials, project metadata, and system information.

  • Data is processed solely for delivering architectural visualization within the Interstitial AI platform.
  • The legal basis is Art. 6 (1) (b) GDPR (contract performance).
  • Data is retained only as necessary for operational and legal compliance.
  • Users can request data deletion by contacting info@interstitial-ai.com.

13. International Data Transfers

Some of our service providers are based in the United States. We ensure that all transfers of personal data to countries outside the EU/EEA are protected by appropriate safeguards:

  • Cloudflare, Inc. (hosting, CDN, video, storage) — certified under the EU-US Data Privacy Framework.
  • Google LLC (Analytics, Tag Manager) — certified under the EU-US Data Privacy Framework. Data processing through Google Ireland Ltd.
  • Stripe, Inc. (payments) — certified under the EU-US Data Privacy Framework. European payments handled by Stripe Payments Europe, Ltd. (Ireland).
  • FormSubmit (form processing) — email-based forwarding; no persistent data storage.

Where the EU-US Data Privacy Framework applies, transfers are permitted under Art. 45 GDPR (adequacy decision of July 10, 2023). Additionally, Standard Contractual Clauses (Art. 46 (2) (c) GDPR) are in place as a supplementary safeguard where applicable.

14. Data Retention Summary

Data Category Retention Period
Server/access logs Up to 30 days
Cookie consent records 12 months
Analytics data 14 months (Google Analytics default)
Contact form inquiries 6 months after resolution
Job applications 6 months after hiring decision
Newsletter subscriptions Until unsubscribed
Account & project data Duration of account; deleted on request
Payment/transaction records 10 years (legal obligation)
Revit Plugin data Duration of account; deleted on request

15. Your Rights

Under GDPR, you have the right to:

  • Access your personal data (Art. 15 GDPR).
  • Rectify inaccurate data (Art. 16 GDPR).
  • Erase your data (Art. 17 GDPR).
  • Restrict processing (Art. 18 GDPR).
  • Data portability — receive your data in a structured, machine-readable format (Art. 20 GDPR).
  • Withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7 (3) GDPR).
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for our company is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

To exercise any of these rights, contact us at info@interstitial-ai.com. We will respond within one month of receiving your request.

16. Right to Object (Art. 21 GDPR)

Your Right to Object

Where we process your personal data based on legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object at any time for reasons relating to your particular situation. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

To exercise your right to object, contact us at info@interstitial-ai.com.

17. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you within the meaning of Art. 22 GDPR. While our service uses AI models to generate visual content based on your inputs, this is a tool you actively direct — it does not involve automated decisions about you as a person.

18. Changes to This Policy

We may update this privacy policy to reflect changes in our data processing practices or legal requirements. Material changes will be communicated via our website. We recommend reviewing this page periodically. The date at the top indicates the last update.

19. Contact

For any questions regarding data protection, please contact us at:
Interstitial AI GbR
Fraunhoferstrasse 39, 80469 Munich
info@interstitial-ai.com

Related Legal Documents