This is a courtesy translation. The German version is the legally binding one.
SteGra LLC
30 N Gould St Ste N
Sheridan, WY 82801 USA
EIN: 30-1365609
E-mail: info@meine-bots.de
Phone: +49 (0) 155 635 869 55
Authorized representative (member): Stephan Graf
Protecting your personal data is important to us. We process your data exclusively in accordance with applicable legal provisions (GDPR, the German Federal Data Protection Act (BDSG) and other applicable data protection laws). In this privacy policy, we inform you about the most important aspects of data processing in connection with our website and our AI services.
Various personal data is collected when you use our website. Personal data is data that can be used to personally identify you. Depending on your use of our services, the following data may be processed:
This data is processed for the following purposes:
Your data is processed on the basis of the following legal bases:
Your personal data is transferred to third parties only if:
We use Cal.com to book introductory calls and consultations. When you book an appointment, the data you provide is transmitted to Cal.com. Details on this integration can be found below under "Externally loaded services".
As a provider of AI solutions, we use state-of-the-art technologies to deliver our services. This may involve processing the following data:
This data is processed in order to offer you tailored AI solutions and to continuously improve them. We ensure that all data protection requirements are taken into account when developing and implementing our AI systems.
Chatbots and voice assistants on this website and in our client projects inform you at the start of the interaction that you are interacting with an AI system (Art. 50(1) AI Act). Audio, image and video content generated or edited by us that depicts real persons is labelled as artificially generated (Art. 50(4) AI Act). The underlying models are supplied by platform service providers (including Anthropic, OpenAI, ElevenLabs, Voiceflow); where marking takes place at model level, it is their responsibility. We ensure the AI literacy required under Art. 4 AI Act.
Text on this website was created in part with AI assistance. This does not trigger a labelling obligation, as it is not published for the purpose of informing the public on matters of public interest within the meaning of Art. 50(4) subparagraph 2 AI Act; all content is reviewed editorially before publication.
Our website does not use cookies for web analytics. For traffic measurement, we use the software Umami, which we operate ourselves. Details can be found below in section 13 "Traffic measurement with Umami".
You have the following rights:
To exercise your rights, please contact us using the contact details provided.
We take appropriate technical and organizational measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security measures are continuously improved in line with technological developments.
We only store your personal data for as long as necessary for the purposes for which it was collected, or as long as legal retention periods apply.
We reserve the right to amend this privacy policy as needed so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy.
For traffic measurement, we use the open-source software Umami, which we operate ourselves. The script is loaded from analytics.meine-bots.de. Umami and its database run on servers of Railway Corporation (San Francisco, USA) in its "EU West" region in Amsterdam (Netherlands).
When you open a page, the script transmits to our Umami server: the address of the page including the parameters in the address (for example campaign parameters such as utm_source and click identifiers of advertising networks such as gclid or fbclid) and any fragment (the part after #), the referring page, the page title, the screen size and the language setting of your browser. If you click a button or link marked for this purpose or open a page designated for this purpose, the script additionally transmits an event name and, where applicable, the details stored for it (for example the position on the page). We store this information.
In doing so, our server processes your IP address and the identifier of your browser (user agent). From the user agent it determines and stores browser and operating system, from the user agent and the screen width the device type, and from the IP address country, region and city. It determines the location using a database on the server itself, without querying another provider. Umami does not store the IP address or the user agent itself in its database.
From the website, IP address, user agent, the current calendar month and a secret key of our server, Umami derives a pseudonymous identifier. Page views and events from the same IP address and the same browser within one calendar month receive the same identifier and can thus be attributed to a common usage history; from the next month on, a new identifier is created. Umami additionally groups page views and events that belong together in time (usually within the same hour) into one visit.
Umami does not set cookies. On loading and before each transmission, the script reads the entry "umami.disabled" in the local storage of your browser (localStorage); if it is set, no measurement takes place. The script writes nothing to local storage. The script keeps a session value returned by the server only in the memory of the open page and sends it along with further events; it is not stored permanently on your device. Our configuration does not evaluate the browser setting "Do Not Track".
The legal basis is our legitimate interest in measuring the reach of our website and our campaigns and in improving our offering (Art. 6(1)(f) GDPR). Your right to object under Art. 21 GDPR (section 9) also applies here.
We delete page views and events together with the details transmitted with them 14 months after they were recorded, and the associated session details (browser, operating system, device type, screen size, language, country, region and city) 14 months after the last page view or event with the same pseudonymous identifier, at the latest about 15 months after they were first recorded. A nightly deletion run removes older entries for this purpose.
Railway receives requests to analytics.meine-bots.de at the network node that is closest in network terms; this node may also be located outside the EU. The encrypted connection is decrypted there and forwarded to our server in Amsterdam. For each request, Railway logs, among other things, the IP address, user agent, host name, requested path and time. Depending on the Railway plan, we can view these logs for 7 or 30 days; Railway has not published how long it actually stores them. In its published Data Processing Addendum, Railway declares itself an independent controller for "Company Usage Data", including activity logs; we are having it legally reviewed whether the logs of requests to our server fall under this. According to the same addendum, Railway's primary processing operations take place in the USA. For transfers to the USA see section 16.
We load the following services only after an active user action — no connection to these third-party providers is made beforehand:
This website is hosted by Netlify, Inc. (USA). Netlify provides static hosting and a content delivery network (CDN). When you visit our website, Netlify collects server-side log data (including IP address, timestamp, and user agent) to ensure the technical operation of the website. The legal basis is our legitimate interest in a secure and functional website operation (Art. 6(1)(f) GDPR). Data transferred to Netlify in the USA is based on Standard Contractual Clauses or, where Netlify is certified, the EU-US Data Privacy Framework.
The controller within the meaning of the GDPR, SteGra LLC, is a company based in the USA. To deliver our services, we also use a number of processors based in the USA (see item 17). Insofar as personal data is transferred to the USA or other third countries outside the EU/EEA, this is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or, where the respective provider is certified, on the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR).
Railway Corporation (USA, see section 13) is certified under the EU-US Data Privacy Framework (query of the official participant list on 16 October 2026). We base transfers to Railway in the USA on the adequacy decision of the European Commission for the EU-US Data Privacy Framework (Art. 45 GDPR).
Depending on the service booked, we use the following processors/sub-processors to deliver our AI services:
Where required, data processing agreements pursuant to Art. 28 GDPR are in place with the aforementioned service providers. Details on the specific cooperation with individual providers can be found in the respective individual contracts or the General Terms and Conditions.
Last updated: October 2026
