Legal
Privacy Policy
Information per Art. 13 and 14 GDPR on the processing of personal data on this marketing website (entradigm.com). The app at app.entradigm.com has its own privacy policy, maintained in the app. Last updated: June 2026.
1. Controller
Kerim Agdaci (ByKA Insights), Wolnzach, Germany. Email: contact@bykainsights.com. Full provider details in the Imprint.
2. Processing when you visit this website
This marketing website is designed as a static page and sets no tracking cookies and no web-analytics tracking. When pages are retrieved, the hosting provider processes technically necessary connection data (e.g. IP address, time of access, resource accessed, user agent) to deliver and secure the site. The legal basis is the legitimate interest in a secure and functional service (Art. 6(1)(f) GDPR). This connection data is used only for short-term technical delivery and attack defense and is generally deleted or anonymized within a few days; longer retention occurs only where required for security. See Cookies for details.
3. Hosting and third-country reference
The website is delivered via Cloudflare (processing per Art. 28 GDPR, EU region). Cloudflare processes the connection data named under item 2 on our behalf. The provider belongs to a corporate group headquartered in the USA; to the extent processing occurs outside the EU, it is safeguarded by EU Standard Contractual Clauses (Art. 46 GDPR).
4. Lead capture (Early Access request)
If you fill out the Early Access form or the contact form on this website, we process the following data categories: name, email address, company, use-case description. The purpose is Early Access onboarding (reviewing and responding to the request, sending an invitation) and answering general contact inquiries. The legal basis is your explicit consent per Art. 6(1)(a) GDPR, which you give by checking the consent box. Processors for form submission: Supabase Inc. (database, EU region) and Resend, Inc. (transactional email, EU). Data is retained until you withdraw your consent or the beta phase ends, whichever occurs first. Deletion is possible at any time on request to contact@bykainsights.com (Art. 17 GDPR). You may withdraw your consent at any time; the lawfulness of processing carried out until then remains unaffected.
5. Sub-processors and third-country transfers
For this website (entradigm.com) itself we use Cloudflare (hosting/CDN), Supabase (database service for the Early Access form, see the Lead Capture section) and Resend (email notification) as processors. The following additional categories apply for the app platform (app.entradigm.com):
As part of using the platform (app.entradigm.com) we use further processors to which personal data is disclosed. Where processing takes place in a third country (outside the EU/EEA), it occurs on the basis of EU Standard Contractual Clauses (Art. 46 GDPR, Decision 2021/914) or other suitable safeguards. Overview by category:
| Category | Region / third country | Transfer basis |
|---|---|---|
| AI inference | USA | SCC 2021/914 |
| Hosting / edge compute | EU + USA | EU region (primary); SCC 2021/914 (USA PoPs) |
| Database / auth | EU region | EU hosting (no third-country transfer) |
| Transactional email | EU | EU hosting (no third-country transfer) |
| Notifications (messaging bot) | Third country | SCC 2021/914 |
| Web research | USA | SCC 2021/914 |
| Social publishing (optional provider) | Third country | SCC 2021/914 |
| Email marketing | EU (Lithuania) | EU hosting (no third-country transfer) |
The complete, named and always-current sub-processor list can be viewed in the app under Settings → Privacy as well as in the Data Processing Agreement (DPA). You can find the DPA at app.entradigm.com/legal/avv. Data processing agreements with all sub-processors are concluded before processing begins.
6. Sign-in / product use
Actual product use (sign-in, cycles, content) takes place on app.entradigm.com. Processing there is described in the app's own privacy policy. The app uses passwordless sign-in via magic link with mandatory two-factor authentication. An overview of our infrastructure is on the Security & Compliance page.
7. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). In the product you can delete your own account and data (Settings → Account, Art. 17 GDPR). We grant access and data portability on request to contact@bykainsights.com. You also have a right to lodge a complaint with a data-protection supervisory authority. For the controller this is the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach. No Data Protection Officer has been appointed, as the statutory requirements for one are not met.