Privacy policy

Last updated: 29 October 2026.

This policy covers ansamble.de: the public pages, the waitlist, orders of Reels and market checks, and Google sign-in. The Google account and connection disclosures in section 12 also apply when you use Google with the Ansamble product. Other product services are outside the scope of this website policy.

1. Data controller

We are not required to appoint a data protection officer under § 38 BDSG. For every privacy question or request, write to info@ansamble.de.

2. Data we process and why

Visiting the page. Fonts and images are served from ansamble.de itself. To count visits we store the time, referring host and whether the visit looked automated. These counts contain no visitor identifier.

Optional Google Analytics. If you choose "Allow analytics", Google Analytics 4 measures page visits, traffic sources, scrolling, which sections you see and for how long, clicks with the button's label and the page or external site it leads to, video plays with sound on and how far a video was watched, forms you start and send (without what you type), clicks on a price button, sent orders with the chosen test, sent applications, requests and availability notices with the chosen offer or package, requested previews, and completed payments with their amount. It processes a pseudonymous cookie identifier, browser and device information and the IP address needed to receive requests. We do not send your email or form contents, and do not enable advertising personalization, Google signals or session recording. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can decline without losing access to the website or withdraw consent through "Analytics settings" at any time.

Delivering the page and preventing abuse. Our server and our hosting provider process your IP address to deliver the page and to limit abuse of the form. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a working and secure website.

The Ansamble Hub waitlist. When you join the waitlist on ansamble.de, we store your email address, your language, the time and whether the request looked automated. Earlier early-access signups may also hold what you said you want to start with and the headline version you saw. We use your address only to send you your invitation to Ansamble Hub and launch news that belongs to it. Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw at any time by email to info@ansamble.de; we then delete your entry.

The order form. When you order a check on the home page, we store your email address, the check you chose, the time, whether the request looked automated and, if you give it, your idea as you describe it. We use them to prepare your offer, your invoice and your check, and to contact you about the order. To prepare the check, your idea is processed by Anthropic PBC, an AI provider acting as our processor. For the Real-world test we write ads from your description under a neutral test brand; they run only after you approve them, and ad platforms receive the approved ad, not your email address. Legal basis: steps prior to entering into a contract at your request and the performance of that contract, Art. 6(1)(b) GDPR. We also count views of the home page and clicks on its price buttons, without any visitor identifier.

Paid orders. When you order a Reel, a market check or a real-world test, we process your email address, your description and any files you upload, the order, its price and status, and your consent to early performance with the text you agreed to and the time. Purpose: performing the contract and proving the consent. Legal basis: Art. 6(1)(b) GDPR; for the consent record also Art. 6(1)(c) and (f) GDPR.

Payment. Payment is handled by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your card or wallet data directly with Stripe; we never receive the full card number. Stripe sends us the payment status, the amount, the last four digits and the card brand. Stripe processes payment data as an independent controller for payment processing, fraud prevention and its legal obligations, including in the United States; see Stripe's privacy policy. Legal basis: Art. 6(1)(b) and (f) GDPR (fraud prevention).

Creating your Reel. Your description and the preview are sent to Features & Labels, Inc. (fal.ai), San Francisco, USA, which runs the AI video models on our behalf under a data processing agreement (Art. 28 GDPR). Do not include personal data of others in your description unless you may share it.

Test pages for customers. For customers of the real-world test we run test pages on ansamble.de and place ads for them on Facebook and Instagram. JustBack UG is the controller for the test page. We count page views and clicks without cookies and without accessing your device; only the totals are kept (Art. 6(1)(f) GDPR: measuring the test and the visit guarantee), and your email address only if you enter it voluntarily (Art. 6(1)(a) GDPR). With your consent we pass it to the client named on the page, who is then responsible for it. Meta Platforms Ireland Ltd. delivers the ads under its own responsibility; what Meta processes is governed by Meta's privacy policy. We delete the test page's data 30 days after the report to the client.

Withdrawal. If you withdraw from a contract through the form on ansamble.de/widerruf, we store your name, the order number or order email you enter, the email for the receipt and the time of receipt, and send you the receipt. Legal basis: Art. 6(1)(c) GDPR (§ 356a BGB).

Your free Reel (ansamble.de/videos). Your first Reel is free; one per email address. We store your sentence, the link or brand you name, your email, your language, the time and a shortened hash of your IP address (against spam, deleted after 7 days). Purpose: making and sending your Reel, asking for your feedback, and making sure each email address gets one free Reel (Art. 6(1)(b) GDPR; IP hash Art. 6(1)(f)). To make the Reel, your sentence is processed by AI service providers acting on our behalf: Features & Labels, Inc. (fal.ai), USA, Google (Gemini API) and ElevenLabs. We delete your sentence, the link and the Reel 12 months after delivery; we keep your email address for the same 12 months only to check that the free Reel was already used. If you allow us to show your Reel, we keep it and your consent while it is shown and the consent record for 3 years after (Art. 6(1)(a), Art. 7(1) GDPR). You can withdraw at any time by email to info@ansamble.de; we then remove it.

"Tell me" when free Reels are paused. We store your email, the time and a shortened hash of your IP address. We email you once when Reels are available for €10, then delete your address. Legal basis: your consent, Art. 6(1)(a) GDPR.

3. Obligation to provide data

You do not have to give us any data to read this page. An order needs an email address. Describing your idea is optional; without it we ask you about it by email.

4. Recipients and processors

We do not sell your data. The site runs on servers of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). The servers are located in Germany. To prepare ordered checks, your idea and the details needed for the check are processed by Anthropic PBC, USA, under its data processing agreement (Art. 28 GDPR). We answer orders by email from info@ansamble.de; this mailbox is hosted by Spacemail (Spaceship, Inc.), which processes the messages on our behalf under a data processing agreement (Art. 28 GDPR). Order confirmations, delivery links and withdrawal receipts are sent from the same mailbox. Payments are processed by Stripe Payments Europe, Limited, Ireland, as an independent controller. Reels are generated by Features & Labels, Inc. (fal.ai), USA, as our processor. Reel voices and scripts are also processed by Google (Gemini API) and ElevenLabs as our processors.

With your consent, analytics data is also processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its subprocessors under Google's data processing terms. See how Google uses data from partner sites.

5. Retention

Visit counts contain no personal data. Your waitlist entry is deleted when you withdraw your consent, once you have accepted your invitation and created an account, or at the latest 24 months after you joined. An order that does not lead to an invoice is deleted at the latest 12 months after you sent it. For an invoiced order we delete your idea description at the latest 12 months after delivering the check, or earlier on request; the invoice and business correspondence are kept for the statutory periods of 8 and 6 years (§ 147 AO, § 257 HGB). For Reels and market checks, order, payment and consent records are kept for the same statutory periods. Your description and the generated files are deleted 90 days after delivery unless you agreed that we may show the result as an example. Withdrawal records are kept as long as claims from the contract can be raised.

6. Your rights

• Access (Art. 15 GDPR), rectification (Art. 16) and erasure (Art. 17);
• restriction of processing (Art. 18) and data portability (Art. 20);
• objection to processing based on legitimate interests (Art. 21);
• withdrawal of consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).

To exercise any of these rights, write to info@ansamble.de. We answer within one month.

7. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR).

8. Cookies and local storage

We store your analytics choice in local storage for 180 days to respect it across visits. Only after consent, Google sets first-party _ga cookies to distinguish visits. We limit their lifetime to 180 days. You can change your choice through "Analytics settings" in the footer. Withdrawal stops collection and removes these analytics cookies from this site. User-level and event-level analytics retention is two months; aggregate reports may be retained longer.

9. International transfers

Ideas sent with an order are processed by Anthropic PBC in the United States. The transfer is based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), which are part of Anthropic's data processing agreement; you can request a copy from us. Emails with our email provider may be processed outside the EU, including in the United States, under standard contractual clauses (Art. 46(2)(c) GDPR). Stripe may process payment data in the United States as described in its privacy policy. Reel descriptions and previews are processed by fal.ai in the United States. ElevenLabs and Google may process Reel scripts in the United States under standard contractual clauses (Art. 46(2)(c) GDPR). Other data from these pages is processed in Germany.

With analytics consent, Google may process data outside the EU or EEA, including in the United States. Google describes its applicable transfer safeguards, including the EU–US Data Privacy Framework and standard contractual clauses, in its international data transfer information.

10. Supervisory authority

You have the right to lodge a complaint with a data protection authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You may also contact the authority in the EU member state where you live or work.

11. Changes to this policy

We update this policy when the site changes. The current version is always published here.

12. Google sign-in and optional Google connections

Signing in. If you choose Google sign-in, Google sends us your Google account identifier and verified email address. We use them to create or authenticate your Ansamble account and keep the account identifier linked to it. Sign-in alone does not give Ansamble access to your documents, email or analytics. We set a secure session cookie and a short-lived cookie to protect the sign-in flow. You can also sign in by email or passkey.

Connecting data. A team owner may separately connect Google services and choose the permissions on Google's consent screen. Depending on the feature selected, these permissions allow reading Google Docs and Drive files for import, reading Gmail messages and metadata for the mailbox, sending email through Gmail, or reading Google Analytics and Search Console reports. Each connection serves the team in which it is made. Imported material and reports may be available to authorised members of that team.

Use, storage and sharing. We use Google data to provide the features you request. Connection credentials are encrypted on the server. Content you import can be processed by the AI provider used for the work you request; review the selected provider before using sensitive material. We do not sell Google user data, use it for advertising or use it to train general-purpose AI models. Ansamble's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Control and deletion. You can disconnect Google in Settings, Connections, or revoke access in your Google Account connections. Revoking access stops future authorised access; it does not delete copies already imported into your team. Delete imported content in Ansamble or use the team's Export and delete controls. For account deletion or questions about retained Google data, contact info@ansamble.de. Account identity data is kept while your account exists; connection credentials are kept while connected, and imported content is kept until you delete it or the team is deleted.