Privacy Policy

1. Introduction

Adanos Software GmbH ("we", "us", "our") operates the websites and services accessible at adanos.org and api.adanos.org (the "Service"). This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our websites, APIs and related pages.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Adanos Software GmbH
Käthe-Niederkirchner-Str. 30
10407 Berlin, Germany
Email: contact@adanos.org
Phone: +49-30-54906997

3. Information We Collect

3.1 Information You Provide

When you register for an API key, we collect:

• Name: Your full name for account identification
• Email address: For account management and service communications
• Company name: Optional, for business accounts
• Purpose: How you intend to use the API

3.2 Information Collected Automatically

When you use our API or website, we may automatically collect:

• API usage data: Request timestamps, endpoints accessed, response codes
• IP address: For rate limiting and security purposes
• User agent: Technical information about your client application
• Website analytics data: Page paths, referrer origin, browser/device categories, selected interaction events such as CTA clicks and form interactions and limited pseudonymous server-side analytics identifiers derived from technical connection data, measured without storing analytics identifiers on your device

3.3 Information We Do Not Collect

We do not collect payment information, social media credentials, or any data from your social media accounts. Our Service analyzes publicly available social media data only.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the API service you requested
• Legitimate interests (Art. 6(1)(f)): Security, fraud prevention and service improvement
• Legal obligation (Art. 6(1)(c)): Compliance with applicable laws and regulations

5. How We Use Your Information

We use the collected information to:

• Provide, maintain and improve the API service
• Authenticate API requests and enforce rate limits
• Send service-related communications (e.g., API changes, security alerts)
• Monitor and prevent abuse, fraud and security threats
• Understand website traffic and product usage with limited analytics that do not store analytics identifiers on your device
• Comply with legal obligations
• Generate anonymized, aggregated usage statistics

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

6. Data Sharing and Disclosure

We may share your information only in the following circumstances:

• Service providers: With trusted third-party providers who assist in operating our Service (hosting, analytics), bound by data processing agreements
• Legal requirements: When required by law, court order, or governmental authority
• Protection of rights: To protect the rights, property, or safety of Adanos Software, our users, or others
• Business transfers: In connection with a merger, acquisition, or sale of assets, with continued protection of your data

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account data: Retained while your account is active, plus 30 days after deletion request
• API logs: Retained for 90 days for security and debugging purposes
• Website analytics data: Retained only for as long as needed for traffic analysis, service improvement and security, subject to our active analytics retention settings
• Aggregated statistics: Retained indefinitely in anonymized form

After the retention period, data is securely deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.3) and at rest
• Secure API key generation and storage (hashed, not stored in plaintext)
• Access controls and authentication for internal systems
• Regular security assessments and monitoring
• Incident response procedures
• Primary application data and origin systems hosted within the European Union, with additional safeguards for external delivery and specialized service providers

While we strive to protect your data, no method of transmission or storage is 100% secure.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15): Request a copy of your personal data
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to restrict processing (Art. 18): Request limitation of data processing
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent

To exercise these rights, contact us at contact@adanos.org. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority, in particular in your member state of residence. Our supervisory authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin, Germany

10. International Data Transfers

We primarily use infrastructure and storage within the European Union. Some specialized processors or their subprocessors may access or process data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards such as:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission

11. Cookies and Tracking

Our API service does not use cookies for analytics. Our first-party website analytics on adanos.org does not store analytics identifiers in cookies, local storage, or session storage.

For website analytics, we measure page views, referrer origin, browser/device categories, selected interaction events such as CTA clicks and form interactions and limited pseudonymous server-side identifiers derived from technical connection data. We configure this analytics setup to minimize URL and referrer data and do not use it for advertising profiles or cross-site behavioral advertising.

Separate third-party embeds used on selected pages may be subject to their own storage or connection behavior. Those integrations are described below under third-party services.

Some pages use temporary in-memory caching during the active page session to reduce repeated API calls. This cache is not persisted once the page is closed or reloaded.

12. Third-Party Services

Our Service may integrate with or link to third-party services. Depending on the page and feature you use, this may include providers such as:

• PostHog: Website analytics for page traffic and interaction measurement without client-side analytics storage
• Stripe: Hosted checkout and payment processing for paid plans, including checkout metadata needed to route the selected plan
• TradingView: Embedded market charts on selected stock pages
• Brandfetch: Remote company logo assets on selected stock pages

When third-party content is embedded or loaded, the respective provider may receive technical connection data such as your IP address, browser information and the requested page. Their processing is governed by their own privacy documentation.

13. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email to registered users for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Adanos Software GmbH
Email: contact@adanos.org
Phone: +49-30-54906997
Address: Käthe-Niederkirchner-Str. 30, 10407 Berlin, Germany