Privacy policy

The German version of this policy is legally binding.

The short version

Your chat file, your messages, the names in the chat and your results never leave your device. The analysis runs entirely in your browser. We never receive, store or see this data.

Controller

Scavenger AI GmbH
Thurn-und-Taxis-Platz 6
60313 Frankfurt am Main
Deutschland / Germany

Email: hello@paired-ai.com

What stays on your device

• The chat file is read and analyzed in your browser (in a Web Worker) and never transferred.
• So your result can be shown again after paying at Stripe, we store the computed results (numbers, the two names you picked, the relationship type) in your browser's IndexedDB. It stays on your device. You can delete it any time by clearing this site's data in your browser.
• For anonymous usage statistics, a random session ID is kept in your browser's sessionStorage. It's deleted when you close the tab. We don't set cookies for visitors.
• Fonts and all files are served from our own server, not from third parties.

What we store on our server

1. Payments

When you buy the report you're redirected to Stripe. After payment we store: the Stripe session ID, amount, currency, the email address you entered at Stripe, the payment time, the source (UTM parameters, if any), the language, the anonymous session ID and the SHA-256 hash of your chat file.

The hash is a checksum computed from the file. The content can't be recovered from it. It only lets you unlock your paid report again with the same file, without paying twice.

Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (tax and commercial retention duties). Retention: for the statutory retention periods, usually up to 10 years (§ 147 AO, § 257 HGB).

2. Anonymous usage statistics

We measure with our own solution how many visits there are and how far visitors get (e.g. “guide viewed”, “sample chat opened”, “checkout started”). Per event we store: the event name, the random session ID, a few fixed short values (e.g. phone system, relationship type, message count in rough buckets), UTM parameters, the referring site's domain, OS and browser family (e.g. “ios”, “safari”) and the time.

We don't store IP addresses, the full user agent or anything from your chat. To prevent abuse, your IP address is briefly used in the server's memory for rate limiting and is not stored.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is understanding how the site is used and where visitors drop off, without identifying them. Retention: events are deleted automatically after 14 months.

3. Format reports

If a file can't be read, you can choose to tap “Help us support your format”. We then send only the shape of the first 5 timestamps with every digit replaced by 9 (like “[99.99.99, 99:99:99]”), your browser language, your operating system and the error reason. No names, no messages. Legal basis: Art. 6(1)(a) GDPR (consent by tapping). Retention: reports are deleted automatically after 12 months.

Service providers

Hosting: Railway

The website and database run on Railway Corporation (USA), on servers in the EU (EU West region, Amsterdam, Netherlands). As Railway is a U.S. company, access from the U.S. can't be ruled out. We have a data processing agreement with Railway under Art. 28 GDPR (Data Processing Addendum), which includes the EU Standard Contractual Clauses. Railway is also certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). When you visit the site, the host processes technically necessary connection data (including your IP address) in server logs. These logs are deleted after 30 days at most. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation of the site).

Payments: Stripe

Payments are handled by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe processes your payment and contact details to handle the payment. Details: stripe.com/privacy. We send Stripe no chat content, only the language, source, anonymous session ID and the file hash. Legal basis: Art. 6(1)(b) GDPR.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). You can withdraw a consent at any time with effect for the future. Just write to hello@paired-ai.com. You also have the right to lodge a complaint with a supervisory authority, e.g. the Hessian Commissioner for Data Protection and Freedom of Information. We hold no chat data, so we can't provide any: it only exists on your device.

Last updated: 1 October 2026