1. Who runs Scampilot
The controller responsible for data processing is:
Pixel & Process UG (haftungsbeschränkt)
Operator of the Scampilot service
Marliring 74
23566 LĂĽbeck
Germany
Phone: +49 (0) 172 8643008
Email: info@pixelandprocess.de
2. What we process
When you submit a message for analysis (via the web form, your personal forwarding address, the REST API, or the MCP server), we store the content, a unique identifier, the language, and the analysis result (verdict, confidence, signals, recommended actions).
For anonymous checks via /check we never store your IP address in plain text - only a SHA-256 hash salted with a server secret, used solely for rate limiting.
3. AI processing
Submitted content is forwarded to OpenAI through the Laravel AI SDK. We send the message text and the desired output language. OpenAI processes the data under its own privacy terms.
4. Postmark
Forwarded emails arrive via Postmark (USA) and are piped straight into our analysis queue. Postmark acts as a technical receiver.
5. Data processing agreements (DPA / AVV)
With processors that handle personal data on our behalf (notably OpenAI and Postmark) we have data-processing agreements in place pursuant to Art. 28 GDPR. Transfers to the USA rely on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
If you use Scampilot in a business context and process third-party data, we will enter into a data-processing agreement (Auftragsverarbeitungs- vertrag) under Art. 28 GDPR on request. Contact info@pixelandprocess.de.
6. Retention
Reports are kept while your account exists. You may request deletion at any time.
7. Your rights
Access, rectification, erasure, portability, and complaint to a supervisory authority. Requests: info@pixelandprocess.de.