Privacy Policy

Effective: July 2026 · Agency Scripts (Sole Proprietor: Leon Rudolf)

This translation is provided for the reader's convenience. In case of discrepancies, the German version prevails.

1. Controller & Contact Details

The data controller responsible for data processing on this website pursuant to Art. 4 (7) GDPR is:

Agency Scripts
Sole Proprietor: Leon Rudolf
Die Halde 2
64853 Otzberg
Germany
Email: info@agencyg.de

When using Agency Support (help.agencyg.de), we process the following data:

Discord Account Details (Discord User ID, Username, Avatar)
Contact Information (Email address if provided for support or billing)
Ticket History & Communication (Tickets, messages, attachments, system logs)
Transaction & Quote Data (PayPal order IDs, quote details, invoice data)
Account data from Google or Apple sign-in (identifier/openid, email address, profile name) if you use this sign-in method

Data processing is carried out based on the following legal grounds:

Contract Performance & Pre-contractual Measures (Art. 6 (1) (b) GDPR) for support tickets, custom scripts, and orders.
Legitimate Interests (Art. 6 (1) (f) GDPR) for security, fraud prevention, and system stability.
Legal Obligations (Art. 6 (1) (c) GDPR) for compliance with tax and commercial retention requirements.

Your data is only shared with third-party service providers essential for contract execution:

Discord Inc. (OAuth2 authentication, bot notifications)
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Secure payment processing)
Specialized AI provider (AI-assisted ticket replies, USA; transfer based on Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR; legal basis Art. 6 (1) (b) or (f) GDPR; name available upon request)
Brevo (delivery of notification emails, processing within the EU)
Tebex Ltd (purchase verification, United Kingdom; adequacy decision of the EU Commission)
Google LLC, Firebase Cloud Messaging (push notifications for the Companion app, processing of device tokens, USA; EU-US Data Privacy Framework)
Google LLC and Apple Inc. (sign-in with a Google or Apple account, account data openid, email address and profile; Google: EU-US Data Privacy Framework; Apple: Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR)
Cloudflare, Inc. (content delivery network and security, USA; EU-US Data Privacy Framework)

Under the GDPR, you possess the following rights at all times:

Right to Access & Data Portability (Art. 15 & 20 GDPR), Export your data as a JSON file anytime via self-service.
Right to Erasure (Art. 17 GDPR), Delete your account and all associated ticket data completely at any time.
Right to Rectification (Art. 16 GDPR) and Objection (Art. 21 GDPR).
Right to Restriction of Processing (Art. 18 GDPR).
Right to withdraw any consent given (Art. 7 (3) GDPR) with effect for the future.
Right to lodge a complaint with a data protection supervisory authority, in particular Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Wiesbaden, datenschutz.hessen.de.

We store personal data only for as long as it is required for the respective purpose. The following periods apply to Agency Support:

Closed tickets: moved to the internal archive 48 hours after closing, deleted there after 90 days.
Tickets without a reply: closed automatically after 48 hours, then handled like closed tickets.
Tickets without activity: closed automatically after 90 days, then handled like closed tickets.
Tickets archived by the team: deleted after 90 days.
AI usage log (without message contents): deleted after 180 days.
Statutory retention obligations, in particular for invoice data, remain unaffected.