Privacy Policy
Last updated: 25 June 2026
1. Controller
The controller responsible for processing personal data on this site within the meaning of the GDPR is Maximilian Béla Binz (sole trader, trading as “Sherlock”), Glasergasse 4, 1090 Vienna, Austria. Further contact details are in our imprint.
2. Data we process
Account data (name, email, organisation), interview transcripts and uploaded materials, technical log data (IP address, user agent), and analytics signals if you give consent.
3. Legal bases (Art. 6 GDPR)
Performance of contract (Art. 6(1)(b)), legitimate interest in operating and securing the service (Art. 6(1)(f)), and consent for analytics and marketing cookies (Art. 6(1)(a)).
4. Recipients & sub-processors
We use vetted hosting and AI providers acting as processors under Art. 28 GDPR. In particular, payments and checkout are handled by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). Stripe receives customer contact details, billing address, IP address and payment data in order to process the sale, issue receipts, manage subscriptions, and handle refunds and chargebacks. Stripe's privacy notice is available at stripe.com/privacy. A current list of other sub-processors is available on request.
5. International transfers
Where data is transferred outside the EEA, we rely on Standard Contractual Clauses and supplementary measures.
6. Retention
Account data is kept for the duration of the contract plus statutory retention periods.
7. Security
We apply appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, encryption at rest for stored data, role-based access controls, and audit logging of administrative actions.
8. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object, as well as the right to lodge a complaint with a supervisory authority.
9. Contact
For privacy requests: maximilian@trysherlock.io.