Privacy
Last updated: October 2026
This page describes what data is processed when you visit mitarbot.de and when you use Mitarbot. It is deliberately specific: if something leaves our systems, it is listed here.
Controller
The controller is Johannes Reuter, reachable at email@johannes-reuter.de. The full provider details are in the imprint.
No tracking, no ads
The public pages of mitarbot.de use no analytics, advertising or social-media cookies. There is no Google Analytics, no Meta pixel and no sharing of visit data with third parties.
Technically necessary cookies exist only when you sign in or open the live demo: a session cookie for authentication and a time-limited cookie for demo access. Both are required to operate the service and are not used to build profiles.
What the browser stores
Theme, language and expert mode are kept in your browser's localStorage. These values stay on your device and are not transmitted to us.
Server logs
When you load the site, the web server processes technically necessary access data (time, requested address, status code, browser identifier, shortened IP address) to deliver the page and to defend against attacks. The logs are deleted after a short period and are not merged with other data.
Waitlist
If you join the waitlist, we store your email address, the time of signup and the confirmation status. You receive a confirmation email with a link; only after clicking it is the signup confirmed (double opt-in).
Delivery runs through Lettermint (Netherlands). The address is used only for notices about access and general availability. We delete it on request at any time.
Contact form
When you use the contact form, we process your name, email address and message in order to answer the enquiry (Art. 6(1)(b) GDPR for contractual enquiries, otherwise (f)).
Delivery runs through Lettermint (Netherlands). We delete the message once it is handled and no statutory retention obligations apply.
To prevent spam we count requests per IP address for one hour. The content of the message is not stored for that.
Using the workspace
Files, chats, mini-apps and schedules live in your workspace on a server at Hetzner in Falkenstein (Germany). Backups stay in Germany as well and are deleted with the workspace.
Model processing runs through an EU gateway at Cortecs with inference at TensorX on servers in Dublin and Helsinki. There is a zero-retention agreement: prompts and answers are not stored and not used for model training.
- Storage: Hetzner Cloud, Falkenstein (Germany)
- Model processing: Cortecs EU gateway, TensorX in Dublin and Helsinki
- Email delivery: Lettermint (Netherlands)
- Connector credentials: isolated gateway on the same German server; the agent and the model never see them
Two exceptions we do not hide
When the agent searches the web, only your search query goes to an external search provider. When it generates an image, only the image prompt goes to an international endpoint. Your files and chats do not leave the EU.
No sharing, no selling
We do not sell data and do not pass it on for advertising. Sharing happens only with the service providers listed above for operation, on your explicit instruction (for example when sending an email through your connected inbox) or where we are legally required to do so.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can export your workspace as a ZIP at any time and delete it completely.
For requests, an email to email@johannes-reuter.de is enough. You may also complain to the competent data protection supervisory authority.
Changes
If processing changes, we update this page and the date above. For new data flows we ask for consent first where required.