Privacy Policy
This page describes the minimal data processing used for this website, Stripe Checkout payments and controlled review-download access.
Controller and Contact
Winfried Brueckner / ruahAI, Buchenweg 5, 63825 Blankenbach, Germany. Contact: brueckner@bw-ruah.de.
Website Access
This website does not use marketing cookies, analytics cookies, tracking pixels, advertising profiles, newsletters, CRM tracking or behavioural analysis. Technical access and security events may be logged by the server to maintain availability, prevent misuse and preserve basic traceability.
Stripe Checkout
Paid review downloads use Stripe Checkout for payment processing. Payment details are entered on Stripe-controlled payment pages. ruahAI does not receive or store full card numbers or comparable payment credentials. Stripe processes payment data under its own terms and privacy notices.
Stripe information: Stripe Privacy Policy and Stripe Privacy Center.
Payment and Download Metadata
For paid downloads, the server may store minimal access metadata required to verify payment and deliver the file:
- Stripe Checkout Session ID;
- asset ID;
- buyer email if provided by Stripe;
- payment status;
- creation time;
- hashed download token, token expiry and used-at timestamp;
- Stripe webhook event ID for duplicate processing prevention.
Download tokens are not stored in clear text. The ZIP file is stored outside the public webroot and is delivered only through a payment-checked download gate.
Review Access Boundary
Review artifacts are buyer-managed materials for internal professional review, governance assessment and evaluation. This website does not provide a SaaS workspace, customer document upload, employee monitoring system or behavioural profiling service.
Retention
Payment and access metadata is retained only as long as needed for payment verification, security, accounting, dispute handling and traceability. Stripe may retain payment records according to its own legal and operational requirements.
Rights and Requests
You may contact ruahAI by email for privacy-related questions or access/deletion requests. Some payment records may need to be retained where legal, tax, accounting, fraud-prevention or dispute-resolution duties apply.