Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

2.1 Subscription Data

When you subscribe, we collect:

• Email address
• Notification preferences (selected providers, model types)

2.2 Usage Data

We automatically collect:

• Subscription date
• Notification delivery status
• Preference update history

2.3 Website Analytics

We use Plausible Analytics, a privacy-friendly, open-source analytics tool that we self-host on our own servers in Germany. Plausible does not use cookies, does not collect personal data, and does not track you across sites. It collects only aggregate, non-identifiable data such as page views, referral sources, browser and device type, and country-level location. No individual visitor profiles are created. You can read more about Plausible's approach to privacy at plausible.io/data-policy.

2.4 Email Engagement Data

When you open an alert email, a small image may be loaded from our email delivery provider's servers. This records that the email was opened, along with the date and time. When you click a link in an alert email, the click may be routed through our email delivery provider to record that the link was clicked. We use this data solely to monitor delivery quality and improve our service. No browsing activity, location, or device data is collected through this mechanism.

3. Legal Basis for Processing

Under GDPR, we process your data based on:

• Consent (Art. 6(1)(a)): You actively subscribe and can withdraw consent at any time by unsubscribing.
• Legitimate Interests (Art. 6(1)(f)): Service reliability, abuse prevention, and delivery monitoring.

4. How We Use Your Data

We use your personal data exclusively to:

• Send release alert emails matching your selected preferences
• Allow you to manage your notification preferences
• Process unsubscribe requests
• Monitor email delivery reliability
• Measure email engagement (opens and clicks) to monitor delivery quality

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Cookies

We use minimal cookies:

We do not use advertising cookies or third-party trackers. Our website analytics (Plausible) is fully cookieless and does not store any data on your device.

6. Data Sharing & Subprocessors

We share your data with the following service providers who process data on our behalf:

All subprocessors are contractually bound to protect your data and only process it as instructed by us.

7. International Data Transfers

We primarily store and process your data within the European Union.

When we transfer data outside the EU (e.g. for email delivery), we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission and appropriate technical safeguards.

8. Data Retention

We retain your data for as long as necessary to provide our services:

• Subscription data: Until you unsubscribe, then marked inactive. Full deletion on request.
• Delivery logs: 90 days, then deleted.
• Server logs: 90 days, then anonymized or deleted.
• Email engagement data (opens, clicks): 90 days, then deleted.

9. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Request we limit how we process your data.
• Portability: Receive your data in a machine-readable format.
• Object: Object to processing based on legitimate interests.
• Withdraw consent: Unsubscribe at any time via the link in any email.

To exercise these rights, contact us at hello@modelalert.ai. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the Bayerisches Landesamt fur Datenschutzaufsicht (BayLDA).

10. Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest
• Token-based authentication for preference and unsubscribe links
• Regular security updates and monitoring

11. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify subscribers of significant changes by email. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us: