Privacy Policy
1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we collect your data?
Your data is collected when you provide it to us. This may include data you enter in product forms (e.g., account or support contact details).
Other data is automatically collected or collected with your consent when you visit the website through our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access).
2. Responsible Party
Lukas van Uden
Warthestraße 51
12051 Berlin
Germany
Email: hello@permmit.com
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
3. Your Rights
You have the right at any time to:
- Request information about your stored data
- Request correction of inaccurate data
- Request deletion of your data
- Request restriction of processing
- Request data portability
- Object to processing
- Withdraw consent you have given
- Lodge a complaint with a supervisory authority
4. Hosting
This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit this website, Vercel may collect technical data such as IP address, browser type and version, and time of access.
The use of Vercel is based on Art. 6(1)(f) GDPR. We have a legitimate interest in reliable presentation of our website.
For transfers to the USA, there is an adequacy decision by the EU Commission (Data Privacy Framework).
5. Product Account & Communications
When you create an account or interact with product flows, we may collect:
- Account data (e.g., email address)
- Security and abuse-prevention data (e.g., IP address, timestamps)
- Technical metadata required to operate onboarding and API flows
We use this data to provide and secure the AgentRef service. Processing is based on contract performance (Art. 6(1)(b) GDPR) and legitimate interests in secure operations (Art. 6(1)(f) GDPR).
You can request information, correction, or deletion of your personal data via the contact address listed above.
6. Email Delivery
For sending transactional emails, we use Resend Inc. (548 Market St, San Francisco, CA 94104, USA). When sending emails, your email address and the email content are transmitted to Resend.
Use is based on contract performance (Art. 6(1)(b) GDPR) and legitimate interests in reliable service communication (Art. 6(1)(f) GDPR).
7. Analytics Tools
We use PostHog (PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) to analyze user behavior on our website. PostHog collects:
- Pages visited
- Time spent on site
- Device and browser information
- Approximate location (country/region)
Analysis is based on our legitimate interest in improving our offering (Art. 6(1)(f) GDPR). IP addresses are anonymized.
8. Cloudflare
We use Cloudflare (Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA) for DNS, CDN, and as an API gateway. Cloudflare may process the following data:
- IP address
- Security-related data (for attack prevention)
- Performance data
Use is based on our legitimate interest in secure and performant provision of our website (Art. 6(1)(f) GDPR).
9. SSL Encryption
This site uses SSL encryption for security reasons. An encrypted connection can be recognized by the browser address bar changing from "http://" to "https://" and by the lock icon in your browser bar.
10. Changes to This Privacy Policy
This privacy policy is currently valid as of January 2026.
Due to the further development of our website or due to changed legal requirements, it may become necessary to change this privacy policy.