Privacy policy

In short: this website sets no cookies, loads nothing from third-party servers and uses no trackers. We only receive data if you write to us. The browser extension iFlowTailor has no server on our side – what it processes stays in your browser (section 5).

This is a translation for convenience; the German version is legally binding. You can switch to it with the language switcher at the top of the page.

1. Controller

CloudDNA GmbH, Untere Hauptstraße 23, 7410 Loipersdorf, Austria
Managing director: Martin Koch · Phone: +43 664 1964199 · E-mail: office@clouddna.at

We are not obliged to appoint a data protection officer. For all data protection questions, you can reach us at the e-mail address above.

2. Visiting the website

When you visit the website, our hosting provider processes technically necessary data (IP address, time, page requested, browser identifier) in server logs in order to deliver the page and protect it against attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The logs are deleted automatically after a short time.

Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Delivery preferably from the Frankfurt (fra1) region. Where data may reach the USA, we rely on: EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) and standard contractual clauses.

3. No cookies, no trackers, no third-party content

We do not set cookies. We access your device only where this is strictly necessary for a function you have chosen (§ 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), § 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG)). Fonts, scripts and graphics are hosted on our own server; no content is loaded from Google, social media platforms or analytics services. Your browser stores the light/dark choice only for the current visit (sessionStorage); it is not transmitted to us. The flywheel graphic and the Quick Review example view run exclusively in your browser and transmit nothing.

4. Requests via the form and by e-mail

If you request a demo, Beta access or a quote, or write to us, we process your details (name, company, e-mail, subject of your request, role, number of tenants and users, message and – if you came via a link with a campaign code – that code from the address bar, so that we know what you are responding to) in order to reply to you and arrange an appointment. The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (point (f)). We create the request as a contact in our CRM (the Tailor-Plattform of CloudDNA) and handle it there; no processor outside CloudDNA is involved. In the “Thank you” window after submitting, we display your first name and e-mail address only in your browser – nothing is stored or transmitted to third parties for this. We keep the request until it has been dealt with, and beyond that only where statutory retention obligations apply or a contractual relationship results from it. We will not send you a newsletter unless you expressly subscribe to one.

5. Browser extension iFlowTailor

This policy also applies to the browser extension iFlowTailor for Chrome, Microsoft Edge and Firefox. In short: iFlowTailor has no server. We do not collect, store or receive any personal data via the extension. There is no telemetry, no analytics and no advertising.

Data from your SAP tenant, such as iFlow content, message status, error texts and certificate metadata, is retrieved by the extension directly from the tenant using your existing browser session, and processed only locally in your browser and only when you take an action. The extension does not read certificate contents, private keys or passwords from the security material – only names, type and expiry dates.

Local storage (extension storage, IndexedDB): settings, tenant index, test collections, metrics history and the log of write actions. Secrets such as API keys or service keys are stored encrypted with AES-GCM. This data is deleted when you remove the extension or use “Delete index”.

Connections to third parties that you trigger: requests to the target API you enter in Test Studio; text sent to the AI provider you configure yourself for Ask Tailor (only once switched on; before sending, e-mail addresses, hosts, URLs, IP addresses, IBANs, tokens and secrets are replaced with placeholders; processing by the provider is subject to its terms and your contract with it); upload of generated documentation to your Confluence; and, at your explicit request, checking Maven coordinates and versions against OSV.dev. For each of these hosts, the browser asks for your permission first. The feedback link opens your e-mail program with a pre-filled text that contains no tenant data.

Where personal data is involved, you process it yourself in your browser. We do not receive this data and are therefore neither a recipient nor a processor. Licence keys are verified offline, without a licence server. Updates to the extension come exclusively through the browser stores.

6. Advertising

We send advertising e-mails or make advertising calls only with your prior consent (§ 174 TKG 2021).

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, write to office@clouddna.at. You can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at) or with a supervisory authority in your country.

Last updated: 3 November 2026