Privacy Policy

Last updated: 24 August 2026

This policy explains how Bayes GmbH ("Bayes", "we", "us") processes personal data when you use pitchgrid.io and related PitchGrid services — including downloads, the mailing list, and plugin licensing.

It is provided to meet our information duties under Article 13 of the GDPR.

1. Controller

Bayes GmbH
Ölbergstraße 50
50939 Köln
Germany

Managing director: Dr. Peter Jung
Register court: Amtsgericht Köln, HRB 82591
VAT ID: DE296974717

Email: peter@pitchgrid.io / info@bayes.de
Phone: +49 176 200 466 05

See also our Impressum. Company privacy information: https://www.bayes.de/privacy/.

We have not appointed a data protection officer. We are not required to do so for this company.

2. Legal bases

We process personal data only where a GDPR legal basis applies:

  • Art. 6(1)(a) — consent (for example the mailing list)
  • Art. 6(1)(b) — performance of a contract (purchases, licences, support)
  • Art. 6(1)(c) — a legal obligation (bookkeeping and tax)
  • Art. 6(1)(f) — legitimate interests, as specified for each processing below

3. What we process

Website hosting

The site is hosted by Vercel Inc. (USA). Vercel processes server logs that typically include IP address, user agent, referrer, and time of request. Legal basis: Art. 6(1)(f) — operating a secure, reliable website. Retention follows Vercel defaults and what we need for security. Transfers to the United States are based on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Analytics

We use Plausible Analytics OÜ (Estonia) for privacy-friendly, cookieless analytics with no cross-site tracking. The script is loaded from plausible.io. Legal basis: Art. 6(1)(f) — understanding aggregate use of the site.

We also use Vercel Web Analytics (Vercel Inc.) for cookieless, aggregated traffic statistics. Legal basis: Art. 6(1)(f).

Mailing list

If you subscribe, Brevo (Sendinblue SAS, France) stores your email address and, if you provide it, your name. Subscription is sent via POST /api/subscribe. Legal basis: Art. 6(1)(a) consent. We keep the data until you unsubscribe or ask us to delete it. Every mail includes an unsubscribe link. You can also email peter@pitchgrid.io.

Shop and licences

Purchases and licence keys are handled by Moonbase (https://pitchgrid.moonbase.sh). Moonbase processes accounts, payments, licence keys, and activations. Legal basis: Art. 6(1)(b). Moonbase’s own privacy policy applies to checkout. We receive the fact of a purchase and the licence email so we can support you.

Plugin activation

The plugin may send a device fingerprint, operating system, and software version to the licensing service to enforce the licence (see the EULA). Legal basis: Art. 6(1)(b) and (f).

Downloads

Installers may be served from GitHub Inc. (USA), repository pitchgrid-io/pitchgrid-releases. Legal basis: Art. 6(1)(f) and (b). This may involve a transfer to the United States under the Data Privacy Framework and/or Standard Contractual Clauses.

Contact email

If you write to us, we process the content of that correspondence. Legal basis: Art. 6(1)(b) or (f). We keep it for as long as the conversation and statutory periods require.

4. Cookies and tracking

PitchGrid.io does not use tracking cookies. Plausible and Vercel Analytics are designed to work without cookies. The host may set strictly necessary cookies for security or session purposes.

We do not sell personal data. We do not run advertising cookies or a cookie-consent banner, because we do not set non-essential tracking cookies. If that changes, we will update this policy and ask for consent where required.

5. Retention

  • Server logs: typically days to weeks
  • Newsletter: until you withdraw consent or we delete the entry at your request
  • Licences and invoices: for the life of the licence plus statutory bookkeeping (usually 6–10 years in Germany)
  • Contact mail: as long as needed for the conversation and legal requirements

6. Recipients

Regular recipients are Vercel, Plausible, Brevo, Moonbase, GitHub, and the email providers we use to communicate with you. We make no other regular disclosures.

7. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, and portability. You may object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with a supervisory authority. For us that is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), https://www.ldi.nrw.de/. You may also complain in the EU member state where you live or work.

To exercise your rights, email peter@pitchgrid.io or write to the address above.

8. Related documents