Privacy Policy
Last Updated: September 20, 2025
We, Balu Technologies GmbH ("Balu AI/we"), welcome your use of our website and web app ("Our Services"). In the following provisions, we inform you about the type, scope, and purposes of the collection and use of your personal data when using our services. Personal data refers to any information that relates to an identified or identifiable natural person. This includes, in particular, your name and email address.
1. Provider
The provider of the services and the controller in the sense of the GDPR is:
Balu Technologies GmbH
Wormser Straße 47
50677 Köln
Germany
Email: info@balu.ai
2. Data Processing to Enable Use
Whenever you access the content of our services, connection data is transmitted to our web server. This connection data includes:
The IP address of the user
The date and time of the request
The referring URL
Device numbers such as UDID (Unique Device Identifier) and comparable device numbers, device information (e.g., device type)
Browser type / browser version
This connection data is not used to infer the identity of the user or merged with data from other sources, but rather serves to provide the website. The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR.
3. Data Processing upon Request
The use of our landing page is generally possible without providing personal data. You are not obliged to visit our website or provide personal data. However, for using the web app and subscribing to the newsletter, certain data needs to be provided.
3.1. Registration, Waitlist, and Login
For registration to use our web app and for entry into the waitlist, we collect the following personal data:
Email address: for authentication via a magic link provided through Firebase Auth.
Organization name: for managing and categorizing the waitlist.
Purpose: Enabling registration and waitlist management.
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in providing the app).
This data is required for security and to prevent misuse. The storage duration is 30 days.
3.2. Communication and Authentication via Firebase Auth
Authentication is performed through Firebase Auth, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Firebase Auth processes your email address and IP address to provide the magic link and enable login.
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR.
3.3. Newsletter Subscription
If you subscribe to our newsletter via the form provided on our landing page, we store the data you provide (e.g., name, email address) to regularly send you our newsletter.
Purpose: Sending newsletters about our company, products, or services.
Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR (consent).
4. Data Processing for Service Optimization
Our services use cookies to ensure functionality and analyze user behavior. Some cookies are necessary for website functionality (e.g., session cookies), while others are used for analysis and advertising (third-party cookies). You can manage or disable cookies via your browser settings, but this may limit the website’s functionality.
Necessary and functional cookies: Art. 6 para. 1 lit. f GDPR
All others: based on your consent under Art. 6 para. 1 lit. a GDPR
You may revoke this consent at any time.
For additional privacy, you can use browser plugins like AdBlock or Ghostery to prevent tracking.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use of user data requirement.
4.1. Google Analytics
Our website uses Google Analytics to analyze website usage. Data is stored in pseudonymized user profiles, using cookies. Your IP address is shortened within the EU and only anonymized data is transmitted to Google servers in the USA.
Legal basis: your consent under Art. 6 para. 1 lit. a GDPR (via cookie banner).
Note: Google may use the data for its own purposes, and the USA does not provide an adequate level of data protection. However, EU standard contractual clauses are in place.
4.2. Use of Firebase Hosting
Our services are hosted via Firebase Hosting provided by Google Ireland Limited. When you visit, your browser loads necessary data (HTML, stylesheets, JavaScript, and images) by connecting to Firebase servers. As a result, Google becomes aware of your IP address.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure operation).
Google processes data in the USA under the EU-US Data Privacy Framework.
5. Data Transfer
We only transfer your data when it is necessary for the provision of our services, you have consented, a legal obligation exists, or another legal basis applies.
5.1. Data Transfer to Non-EU Countries
Your data may also be transferred to recipients outside the EU, including the USA. Since the USA does not provide an adequate level of data protection, EU standard contractual clauses apply.
6. Storage Duration
We store your data only as long as necessary to fulfill the purposes for which it was processed, or until legal retention periods expire.
6.1. Security Measures
We protect your data with technical and organizational measures against unauthorized access and loss.
7. Your Rights
You have the right to:
Access your personal data (Art. 15 GDPR)
Correct inaccurate data (Art. 16 GDPR)
Delete your data (Art. 17 GDPR)
Restrict processing (Art. 18 GDPR)
Object to processing (Art. 21 GDPR)
Data portability (Art. 20 GDPR)
To exercise these rights, contact us at info@balu.ai.
8. Right to Object
You can object to the processing of your data at any time, particularly for direct marketing purposes.
9. Changes to the Privacy Policy
We will update this privacy policy as necessary. The current version is always available on our website: www.balu.ai.