Privacy Policy
Effective date: May 27, 2026 · Version 2.2
Introduction
In plain language: This policy explains what data we collect when you use Petbase AI, why we collect it, and what rights you have. We are a German company and fully comply with GDPR.
1ds.io UG (haftungsbeschrankt) ("we", "us", "Petbase AI") takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website https://petbase.ai, use the Petbase AI platform, or interact with us.
We comply with the EU General Data Protection Regulation (GDPR), the German Digitale-Dienste-Gesetz (DDG), the Telekommunikation-Telemedien-Datenschutz-Gesetz (TTDSG), and all other applicable data protection laws.
By using Petbase AI, you acknowledge this Privacy Policy. If you do not agree with our data practices, please do not use the service.
Data controller
The data controller responsible for processing your personal data is:
1ds.io UG (haftungsbeschrankt)
Hongkongstrasse 1
20457 Hamburg, Germany
Represented by: Christian Kaspar (Managing Director)
Phone: +49 40 228599 600
Email: privacy@petbase.ai
Register court: Amtsgericht Hamburg
Register number: HRB 165660
Data we collect
In plain language: We collect data you give us (like your name and email), data from your use of the platform (like which features you use), and technical data from your device (like your IP address).
Data you provide to us
- Account data: Name, email address, company name, password (hashed)
- Billing data: Processed by our Merchant of Record, Paddle.com Market Ltd. We do not store credit card details.
- Content data: Product descriptions, images, and other content you upload to Petbase AI for AI processing
- Communication data: Messages you send via contact forms, email, or support channels
Data collected automatically
- Usage data: Features used, pages visited within the app, timestamps, frequency of use
- Device and technical data: IP address, browser type and version, operating system, screen resolution, language settings
- Server log files: Automatically collected by our hosting provider for security and stability
- Cookie data: See the Cookies section below
Data from third parties
- Payment confirmations: Paddle sends us transaction confirmations (no card data)
- Analytics data: Aggregated usage patterns from Google Analytics, Microsoft Clarity, and Visitor Analytics
Legal basis for processing
In plain language: We always need a legal reason to process your data. Here is what reason applies to each type of processing we do.
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the Petbase AI platform | Performance of contract (Art. 6(1)(b)) |
| Account creation and management | Performance of contract (Art. 6(1)(b)) |
| AI-powered content generation | Performance of contract (Art. 6(1)(b)) |
| Payment processing (via Paddle) | Performance of contract (Art. 6(1)(b)) |
| Customer support and communication | Performance of contract / Legitimate interest (Art. 6(1)(f)) |
| Website analytics (Google Analytics, Microsoft Clarity, Visitor Analytics) | Consent (Art. 6(1)(a)) via cookie banner |
| Marketing and remarketing (Meta Pixel) | Consent (Art. 6(1)(a)) via cookie banner |
| Server log files and security | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails (if opted in) | Consent (Art. 6(1)(a)) |
| Legal compliance and fraud prevention | Legal obligation (Art. 6(1)(c)) |
How we use AI
In plain language: Petbase AI uses artificial intelligence to generate SEO-optimized product descriptions and content for your pet business. Here is exactly how that works with your data.
- Content generation: Your uploaded product data is processed by AI models to generate SEO-optimized content. This processing is essential to deliver the service.
- Third-party AI providers: We use external AI model providers (such as OpenAI and Anthropic) to process content, acting as data processors under GDPR.
- No training on your data: We do not use your content, product data, or any personal data to train or fine-tune AI models.
- AI-generated output ownership: All AI-generated content created through your Petbase AI account belongs to you.
- Automated decisions: Petbase AI does not make automated decisions with legal or similarly significant effects on individuals (GDPR Art. 22).
Cookies and tracking technologies
In plain language: We use a cookie consent banner (Cookiebot). We set 9 cookies total: 1 necessary, 5 statistics, and 3 marketing. Necessary cookies work without your consent. Statistics and marketing cookies only activate after you opt in.
We use cookies and similar technologies per TTDSG S 25. You can manage your preferences at any time via our cookie consent banner.
Necessary cookies (1)
These cookies are required for the website to function. No consent is needed (TTDSG S 25(2)).
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| CookieConsent | petbase.ai | Stores your cookie consent state for the current domain | 1 year |
Statistics cookies (5)
Only set after you give explicit consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _clck | petbase.ai | Microsoft Clarity - navigation and behavior data for heatmaps | 1 year |
| _clsk | petbase.ai | Microsoft Clarity - statistical data on user behavior | 1 day |
| _ga | petbase.ai | Google Analytics - visitor device and behavior tracking | 2 years |
| _ga_# | petbase.ai | Google Analytics - tracks across devices and marketing channels | 2 years |
| visa_1_# | app-worker.visitor-analytics.io | Visitor Analytics - statistical data on user behavior | Session |
Marketing cookies (3)
Only set after you give explicit consent. Used for advertising measurement and remarketing.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | petbase.ai | Meta (Facebook) Pixel - advertising measurement and remarketing | 3 months |
| lastExternalReferrer | connect.facebook.net | Meta - records the last URL you visited before arriving here | Persistent |
| lastExternalReferrerTime | connect.facebook.net | Meta - records the time of the last external referrer | Persistent |
You can withdraw your cookie consent at any time by clicking the cookie settings link in our website footer or by clearing cookies in your browser settings.
Third-party services and subprocessors
| Service | Purpose | Data location | Safeguards |
|---|---|---|---|
| Netlify, Inc. | Website hosting | USA | EU-US Data Privacy Framework / DPA |
| Paddle.com Market Ltd. | Payment processing | UK / EU | UK Adequacy Decision / DPA |
| Google Ireland Ltd. | Analytics, YouTube embeds | EU / USA | EU-US Data Privacy Framework |
| Cloudflare, Inc. | CDN, security | Global | EU-US Data Privacy Framework |
| Microsoft Corporation (Clarity) | Analytics, heatmaps | USA | EU-US Data Privacy Framework |
| TWIPLA GmbH (Visitor Analytics) | Analytics, user behavior | EU (Germany) / UK | GDPR-compliant, EU-based / UK Adequacy Decision |
| Meta Platforms Ireland Ltd. (Facebook Pixel) | Advertising measurement, remarketing | EU (Ireland) / USA | EU-US Data Privacy Framework |
| OpenAI / Anthropic | AI content generation | USA | DPA with zero-retention / EU-US DPF |
| Cybot A/S (Cookiebot) | Cookie consent management | EU (Denmark) | GDPR-compliant, EU-based |
Data retention
| Data type | Retention period | Reason |
|---|---|---|
| Account data | Duration of contract + 30 days | Service delivery |
| Content and product data | Duration of contract + 30 days | Service delivery, data export period |
| Billing and invoice data | 10 years after transaction | German tax retention (AO S 147) |
| Server log files | 30 days | Security and troubleshooting |
| Support communications | 3 years after resolution | Legitimate interest |
Your rights under GDPR
In plain language: You have strong rights over your data. You can access, correct, delete, or export your data at any time.
- Right of access (Art. 15): Request a copy of all personal data we hold about you
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
- Right to restriction (Art. 18): Request that we limit how we process your data
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to object (Art. 21): Object to processing based on legitimate interest, including direct marketing
- Right to withdraw consent (Art. 7(3)): Withdraw any consent you gave at any time
To exercise any of these rights, contact us at privacy@petbase.ai. We will respond within 30 days as required by GDPR.
Right to lodge a complaint:
Der Hamburgische Beauftragte fur Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
datenschutz-hamburg.de
Security
We implement appropriate technical and organizational measures to protect your personal data, including SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls and role-based permissions, and regular security reviews.
Contact
For any privacy-related questions, data subject requests, or to request our Data Processing Agreement (DPA), contact us:
Email: privacy@petbase.ai
Phone: +49 40 228599 600
Address: 1ds.io UG (haftungsbeschrankt), Hongkongstrasse 1, 20457 Hamburg, Germany
Ready to turn pet content into traffic?
Start your free trial today. 7-day free trial, cancel anytime.
Try 7 Days Free