Privacy policy

The controller under the GDPR is Webagentur Hochmeir e.U., [Straße Hausnummer], [PLZ] [Ort], Österreich, email: hello@webhoch.com.

Account data: email address, password (stored encrypted), display name, preferred language.

Profile data (voluntary): role, company name, description, skills, collaboration models, location, logo, linked projects, ratings.

Nest usage data: tasks, milestones, messages, file attachments, team and role assignments.

Payment data: for paid plans via our payment provider (we do not store full card details).

Technical data: server logs (IP address, time, requested resource) to provide and secure the service.

We process your data to provide the service (Art. 6(1)(b) GDPR – performance of a contract), to meet legal obligations (lit. c), and based on our legitimate interest in a secure, functioning offering (lit. f). Optional processing (e.g. joining the waitlist) is based on your consent (lit. a), which you can withdraw at any time.

The platform is hosted on a dedicated server we operate in a data centre in [country/region]. Database, authentication and file storage run self-hosted (Supabase components) on that server.

Payments: Stripe (Stripe Payments Europe / Stripe, Inc., USA). When you subscribe, the necessary data is transmitted to Stripe. Transfer to the USA on the basis of the EU Standard Contractual Clauses.

AI matching & translation: for AI-assisted matching and optional translations we transmit the relevant content (e.g. a search description, profile/idea texts) to Anthropic (Anthropic PBC, USA). Only the text needed for the respective function is transmitted. Transfer to the USA on the basis of the EU Standard Contractual Clauses.

Email delivery: transactional emails (confirmation, invitation, password) are sent via our email provider.

Data processing agreements under Art. 28 GDPR are in place or being concluded with all processors.

We store your data for as long as your account exists or as long as it is required for the stated purposes. After you delete your account, your personal data is deleted unless statutory retention obligations (e.g. tax law) apply.

Published marketplace profiles and open search requests / dealflow listings are publicly visible and may be indexed by search engines. You actively grant investor insight into a Nest and can revoke it at any time; only the board, milestones and an anonymised activity feed become visible — chat and the team roster stay private.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future.

To exercise these rights, an email to hello@webhoch.com suffices. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

We only use technically necessary cookies (e.g. for the login session, language and theme selection). These are required for operation and do not store tracking or advertising profiles.