Privacy Policy

Last updated: April 2026

01 — Controller

The controller within the meaning of the GDPR is:

Xtract GbR
Marc Müller, Paul Weber
Am römischen Hof 21, 61352 Bad Homburg, Germany
Email: contact@thextract.com

02 — Data we collect and why

When you sign up for our waitlist, we collect the following data:

  • Email address (required)
  • Full name (optional)
  • Company name (optional)

The purpose of processing is to add you to our waitlist and — if you have separately consented — to send you product updates by email.

The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR, which you give explicitly by checking the consent checkbox during sign-up. You may withdraw your consent at any time with effect for the future by sending an email to contact@thextract.com.

03 — Double opt-in

Waitlist sign-ups are processed using a double opt-in procedure. After submitting your email address, you will receive a confirmation email. Your registration is only activated after you click the confirmation link. We store the timestamp and IP address of the confirmation as proof of consent.

04 — Data processors

We use the following service providers who process personal data on our behalf. A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with each provider:

  • Brevo SAS — Email delivery (double opt-in confirmation, updates); servers in the EU (Frankfurt); headquartered in France
  • Appwrite Inc. — Data storage (waitlist entries); servers in the EU
  • Cloudflare Inc. — Hosting and CDN; servers in the EU and US, data transfer based on EU Standard Contractual Clauses (SCCs)
  • Plausible Analytics (Plausible Insights OÜ) — Website analytics; servers in the EU; no personal data collected, no cookies

05 — Cookies and analytics

We do not use tracking cookies. For website analytics, we use Plausible Analytics. Plausible does not collect personal data and does not set cookies. No cookie banner is required.

06 — Retention period

Your data will be stored for as long as you remain on the waitlist. After the waitlist phase ends or upon your request, your data will be deleted promptly, and no later than 12 months.

07 — Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise your rights, contact us at contact@thextract.com.

You also have the right to lodge a complaint with the competent supervisory authority in your country of residence.