Privacy Policy

1. Name and Address of the Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Joe Saad
Kirchstraße 31
71394 Kernen im Remstal, Germany
Email: hello@joesaad.de

2. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, Vercel processes your IP address and technical metadata (e.g. browser type, operating system, referrer URL) to deliver the website content. This is necessary for the operation of the website and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Vercel may transfer data to the United States. The transfer is safeguarded by the EU-U.S. Data Privacy Framework. For more information, see Vercel's Privacy Policy.

3. Domain Registrar

The domain for this website is registered through Porkbun LLC. Porkbun may process WHOIS data (registrant name, email, address) as required by ICANN regulations. For details, see Porkbun's Privacy Policy.

4. General Data Processing on This Website

This website does not require user registration or login. We do not collect personal data through forms, newsletters, or user accounts. When you visit our website, your browser automatically transmits certain technical data to our server (server log files), including:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages visited

This data is processed on the basis of Art. 6(1)(f) GDPR to ensure the secure and efficient operation of the website. Server log data is not combined with other data sources and is automatically deleted after 30 days.

5. Stelix Desktop Application

The Stelix desktop application is designed with privacy as a core principle. All AI processing happens locally on your device. The application:

• Does not transmit your conversations, prompts, or AI-generated responses to any server
• Stores all conversation history exclusively on your local device
• Does not require an internet connection after the initial model download
• Does not collect usage analytics or telemetry
• Does not require user registration or an account

The only network request made by the application is to download the AI model file from our servers. During this download, standard server log data (IP address, timestamp, user agent) may be processed as described in Section 4.

6. Cookies and Local Storage

This website does not use cookies for tracking or advertising purposes. Technically necessary cookies may be set by our hosting provider (Vercel) to ensure the proper functioning of the website. These are strictly necessary cookies that do not require consent under Art. 5(3) of the ePrivacy Directive.

7. Analytics and Tracking

This website does not use any analytics or tracking tools. No third-party analytics services (such as Google Analytics) are integrated.

8. Third-Party Services

Supabase Storage: The Stelix application download (.dmg file) is hosted on Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992). When you download the application, your IP address and standard request metadata are processed by Supabase. For details, see Supabase's Privacy Policy.

Google Fonts: This website uses fonts provided by Google LLC. When you visit a page, your browser loads the required fonts from Google's servers, which may transmit your IP address to Google. This is based on our legitimate interest in a uniform presentation of our website pursuant to Art. 6(1)(f) GDPR. For details, see Google's Privacy Policy.

9. Social Media Plugins

This website does not use any social media plugins or embed third-party social media content.

10. Data Sharing with Third Parties

We do not sell, trade, or otherwise transfer your personal data to third parties. Data may only be shared with the service providers listed in this privacy policy (Vercel, Supabase, Google) to the extent necessary for the operation of this website.

11. Data Transfers Outside the EU

Some of our service providers (Vercel, Google) are based in the United States. Data transfers to the US are protected under the EU-U.S. Data Privacy Framework or through Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

12. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15 GDPR) — You may request information about whether and which personal data we process about you.
• Right to rectification (Art. 16 GDPR) — You may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You may request deletion of your personal data under certain conditions.
• Right to restriction of processing (Art. 18 GDPR) — You may request restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR) — You may request to receive your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR) — You may object to the processing of your data based on legitimate interests at any time.
• Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

The competent supervisory authority for Baden-Württemberg is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

To exercise any of these rights, please contact us at hello@joesaad.de.

13. Data Retention

Server log files are automatically deleted after 30 days. We do not store any other personal data. If data retention is required by law (e.g. for tax or commercial purposes), the data will be retained for the legally required period and then deleted.

14. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in our practices or applicable law. The current version is always available on this page. We encourage you to review this policy periodically.