Privacy Policy
Last updated: April 12, 2026
1. Controller
Nisl Ventures UG (haftungsbeschränkt)
Schauenburgerstraße 116
24118 Kiel
Germany
Email: nils@getkobe.ai
Phone: +49 160 97737599
If you have any questions about data protection, you can contact us at the address above.
2. Overview of Data Processing
We process personal data only to the extent necessary to provide and improve our website and services. Below we describe each processing activity, the data involved, the legal basis, and any third parties that receive data.
3. Hosting
This website is hosted by Vercel, Inc. (USA). When you visit our website, Vercel processes your IP address, browser type, operating system, referrer URL, and timestamp to deliver the page. All data is transmitted via TLS-encrypted connections. This data is processed on servers that may be located in the United States.
Data retention: Server logs are retained per Vercel's Data Processing Agreement.
Legal basis: Legitimate interest in providing a reliable and performant website (Art. 6(1)(f) GDPR).
Transfer safeguard: We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Vercel, which includes Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
4. Vercel Analytics
We use Vercel Analytics to understand how visitors use our website. Vercel Analytics is cookieless by design — it does not set cookies, does not collect personally identifiable information, and does not track individual users across sessions.
Data collected includes page views, device type, browser, and approximate location derived from anonymized IP addresses. We also track custom events (e.g., waitlist signups) without associating them with individual users.
Visitor sessions are discarded after 24 hours. Aggregated statistics are retained for as long as they remain relevant to improving our service. We review retention periodically.
Legal basis: Legitimate interest in understanding website usage to improve our service (Art. 6(1)(f) GDPR).
5. PostHog Analytics
We use PostHog (PostHog, Inc.) hosted on their EU Cloud (Frankfurt, Germany) for website analytics, session recordings, and heatmaps. PostHog only activates after you consent to statistics cookies via our cookie banner. If you do not consent, no PostHog data is collected.
When active, PostHog collects: page views, clicks, scroll depth, mouse movements (heatmaps), and session recordings. Session recordings mask email and password input fields automatically. Name and phone input fields are excluded from capture via the ph-no-capture class.
PostHog uses cookies and browser local storage to maintain session state. Cookies are prefixed with ph_ on the .getkobe.ai domain to maintain your anonymous session identifier across subdomains. Local storage is used on the same domain for supplementary session data. Both are only set after consent is given.
PostHog respects the Do Not Track (DNT) browser setting. If DNT is enabled, PostHog will not capture any data regardless of consent status.
You can opt out at any time by withdrawing your consent via the cookie banner.
Data retention: Session recordings are retained for up to 30 days. Analytics event data is retained for up to 1 year.
Legal basis: Consent (Art. 6(1)(a) GDPR).
We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with PostHog, which includes Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. For more information, see the PostHog Privacy Policy.
6. Consent Management (Cookiebot)
We use Cookiebot by Usercentrics A/S (Denmark) to manage your cookie consent preferences. When you interact with the consent banner, Cookiebot stores your choice in a cookie named CookieConsent on your device.
Cookiebot processes your anonymized IP address, the date and time of your consent, the consent status, and our website URL.
Data retention: Consent records are stored for 12 months, matching the duration of the consent cookie.
Legal basis: Legal obligation to document consent (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).
We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Usercentrics. For more information, see the Cookiebot Privacy Policy.
7. Waitlist Signup
When you join our waitlist, we collect the following data: name, email address, job title/role, phone number (optional), and company name. If you were referred by another user, we also store the referral code. Providing this data is voluntary. If you choose not to provide the required fields, you will not be added to the waitlist. After signing up, you may optionally take the archetype quiz (see Section 9). If you complete the quiz, your archetype title, LinkedIn profile URL (if provided), and company name are also stored on your Loops contact to enable personalised referral links and email communications.
By submitting the waitlist form, you consent to receiving product-related emails from us (e.g., launch announcements, early access invitations, and product updates). You will receive a confirmation email to verify your email address (double opt-in). Every email contains an unsubscribe link that allows you to withdraw your consent at any time. You can also contact us directly to request removal.
Your data is transmitted to our email service provider Loops (Astrodon, Inc., USA) for the purpose of managing the waitlist and sending emails. At the time of submission, we also capture any UTM marketing attribution parameters from the current URL. If you have consented to marketing cookies, these parameters may also be read from the kobe_utm cookie (see Section 10) for cross-session attribution. This helps us understand which marketing channels are effective.
Data retention: Your waitlist data is stored until you withdraw your consent or request deletion. If you do not confirm your email address (double opt-in), your data is automatically deleted after 30 days.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Transfer safeguard: We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Loops, which includes Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
8. Self-Hosted Video
The product demo video on our website is self-hosted on Vercel Blob storage and served from the same hosting infrastructure described in Section 3. No third-party video services are used. Playing the video does not transmit data to external providers, does not set cookies, and does not involve additional cross-border data transfers.
9. Archetype Quiz
Our website offers an optional archetype quiz that assigns you a work-style archetype based on your answers. When you complete the quiz, the following processing takes place:
a) LinkedIn Profile Enrichment
If you provide your LinkedIn profile URL, we retrieve your publicly available profile photo, headline, job title, and full name via the Fresh LinkedIn Profile Data API provided by RapidAPI, Inc. (USA). This data is used solely to personalise your archetype card. The profile photo is fetched once and cached in your browser's local storage for up to 7 days (see Section 10). No LinkedIn data is stored on our servers beyond the duration of the request.
Legal basis: Consent (Art. 6(1)(a) GDPR) — you choose to provide the LinkedIn URL.
Transfer safeguard: RapidAPI, Inc. is based in the United States. We rely on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR for the transfer.
b) AI-Generated Text
After your archetype is determined, we generate a short personalised description using Google Gemini (Google LLC, USA) via the Vercel AI Gateway. The input sent to the model includes your first name, company, role, LinkedIn headline, job title, the tools you selected, and your quiz answers. It does not include your email address, phone number, or LinkedIn URL. The generated text is returned to your browser and cached locally; it is not stored on our servers.
Legal basis: Consent (Art. 6(1)(a) GDPR) — you initiate the quiz.
Transfer safeguard: The request is routed through the Vercel AI Gateway (see Section 3 for Vercel transfer safeguards). Google processes the data under its Data Processing Amendment, which includes Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
c) Referral Link Creation
When you complete the archetype quiz, we create a personalised referral link so you can share Kobe with others. The shortened link is generated by Dub Technologies, Inc. (USA). Only a destination URL containing UTM attribution parameters and a pseudonymous contact identifier is sent to dub.co — no personal data such as your name or email address is transmitted.
The referral link, your archetype title, LinkedIn profile URL (if provided), and company name are stored on your contact record in Loops (see Section 7) so we can include them in future emails and attribute referrals.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — enabling referral attribution and personalised email communications.
Transfer safeguard: Dub Technologies, Inc. is based in the United States. We rely on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR for the transfer.
Data retention: Your archetype card data (archetype, generated text, tools, and optional LinkedIn profile data) is stored only in your browser's local storage. It is not sent to or stored on our servers. You can delete it at any time by clearing your browser storage. The referral link and contact properties stored in Loops are retained until you request deletion (see Section 7).
10. Cookies
This website uses the following cookies and client-side storage:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
kobe_utm | Stores UTM marketing attribution parameters (source, medium, campaign, term, content). Only set after marketing consent is given via the cookie banner. | 30 days | First-party, marketing |
CookieConsent | Stores your cookie consent preferences (Cookiebot) | 12 months | First-party, necessary |
ph_* | PostHog analytics — anonymous session identifier and feature flags (only set after statistics consent) | 1 year | First-party, statistics |
report_session_* | Authentication token for password-protected report pages. Set when you enter the correct password to view a report. Contains no personal data (cryptographic hash only). | 7 days | First-party, necessary |
In addition, the following data is stored in your browser's local storage:
| Key | Purpose | Duration | Type |
|---|---|---|---|
visitor_id | A randomly generated anonymous identifier (UUID) used to link your waitlist signup to anonymous analytics data. It contains no personal information and cannot identify you on its own. | Session (without statistics consent) / Persistent (with statistics consent) | sessionStorage by default; promoted to localStorage when statistics consent is granted |
kobe_archetype | Stores your archetype quiz result including archetype, generated text, selected tools, display name, role, company, profile photo (as data URI), and referral link. Contains no email address. Used so you can view your card again without retaking the quiz. | Persistent | localStorage, functional |
kobe_ref | Stores a referral code from a shared link so it can be attributed when you sign up for the waitlist. Contains only the referral code string. | 30 days | localStorage, functional |
kobe_linkedin | Caches LinkedIn profile data (photo, headline, job title, name) retrieved during the archetype quiz so it does not need to be fetched again on repeat visits (see Section 9). | 7 days | localStorage, functional |
UTM parameters are also stored in your browser's session storage (not a cookie, not listed above) to preserve marketing attribution as you navigate within a single browsing session. This data is automatically discarded when you close the tab.
You can withdraw or change your cookie preferences at any time by clicking the cookie settings link in the footer of our website.
11. Automated Decision-Making
We do not use automated individual decision-making or profiling as defined in Art. 22 GDPR. No decisions with legal or similarly significant effects are made about you by purely automated means.
The archetype quiz (Section 9) uses an AI model to generate entertaining descriptions, but this does not constitute automated decision-making under Art. 22 GDPR. The quiz result has no legal or similarly significant effect, and does not influence your access to any service.
12. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR) — You can request information about what personal data we process.
- Right to rectification (Art. 16 GDPR) — You can request correction of inaccurate data.
- Right to erasure (Art. 17 GDPR) — You can request deletion of your data, subject to legal retention obligations.
- Right to restriction of processing (Art. 18 GDPR) — You can request that we restrict processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR) — You can request your data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR) — Where we process your data based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. Where your data is processed for direct marketing purposes (Art. 21(2) GDPR), you have the right to object at any time, and we will cease processing for that purpose without exception. You can exercise this right by using the unsubscribe link in any of our emails or by contacting us directly.
- Right to withdraw consent (Art. 7(3) GDPR) — Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at nils@getkobe.ai.
13. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. You may contact the supervisory authority in your place of residence, your place of work, or our registered office:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany
www.datenschutzzentrum.de
14. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our data processing practices or legal requirements. The current version is always available at getkobe.ai/privacy.