Controller
KST Projekt 8510 Stainz GmbH, Liechtensteinstraße 22a, 1090 Wien, Austria. Representation: Mio Ivanov. Privacy contact: aifae.org@gmail.com. This draft does not yet provide complete information about all processing in production.
Public information pages
Public BiQuote widgets including news and the native M1 preview start only after market-data permission; the preview also waits until its section is nearby. Only then does your browser send IP and technical request data directly to BiQuote. Dukascopy in the account app needs the same category; YouTube and external article images there need media permission. Google Analytics is not configured and our own analytics trackers are not loaded. Necessary website and account functions remain available. Language is saved for 365 days and the browser choice for up to 180 days. Hosting may process IP, request time and technical logs. Provider-internal storage, advertising and transfers are not fully verified. The optional Binance crypto-symbol catalogue also requires market-data permission.
Account application and browser storage
The account application processes authentication, profiles, subscriptions, entitlements, private projects and saved analyses through Supabase. Login and activity logs may contain IP addresses and browser identifiers. Authentication sessions, language, appearance and chart preferences are also stored in the browser.
AI functions
Depending on the function and configuration, messages, conversation history, analysis data or private rule definitions may be sent to OpenAI or Gemini; optional audio is sent to OpenAI. A local Ollama service is another configuration option. Builder Copilot requests and replies may be stored in the application. Provider retention, contractual safeguards and data use still require review.
Payments and external content
Depending on the payment flow, Stripe Checkout receives account or customer identifiers, an email address where applicable, and order data. Activation of paid offers requires separate verification. YouTube in news TV and external article images in the account app connect to providers only after media permission. Dukascopy requires market-data permission. The sound button is not a privacy decision. Withdrawal stops further consent-dependent connections; it does not delete data already transmitted or third-party cookies.
Your rights
Subject to the legal conditions, you may request access, rectification, erasure, restriction and portability, object to processing or withdraw consent for the future. Prior lawful processing remains unaffected. Send requests to the privacy contact; you may complain to a competent supervisory authority, such as the Austrian Data Protection Authority.
Details still required
The purposes and legal bases of each processing activity, actual providers and recipients, storage locations, transfers outside the EEA and safeguards, and specific retention and deletion rules including backups still need complete documentation. New coach, media or recording functions require their own review before activation.
Contact requests and suggestions
Through the contact form, we process your optional name, email address, category, subject, message and language to handle your request. Messages are stored in our existing Supabase cloud and can be read in the inbox only by authorised administrators. To protect against abuse, the contact function uses pseudonymised verification values instead of storing IP addresses in plain text. Messages are retained for processing and follow-up questions; archiving does not delete them. Automatic deletion of messages is not currently configured. For access or erasure, contact our privacy contact.