Renomo

Privacy & data processing

How Renomo processes your data, the providers involved, where it is stored, and how we meet the GDPR and the EU AI Act.

Who is responsible

The controller is pageBody GmbH, Bahnstr. 12, 65205 Wiesbaden, Germany. Contact for any data question: info@pagebody.de. Company details are in the Impressum. The service is for business users and is not directed to children.

The short version

The app, its database, and your files run on our own infrastructure in a German Hetzner data center. Core data does not leave the EU.
The phone interview is run by an AI ("Maya"). You are told it is an AI before it starts, and it records only with your explicit consent.
Your Blueprint is generated by AI and is advisory. You review and decide. Nothing is posted to your LinkedIn without your action.
We set no advertising or tracking cookies and run no third-party analytics. Your Blueprint uses your own public profile photo and banner, never AI-generated faces.
The AI provider that analyses your inputs does not use them to train its models under the API terms we use. Your inputs may be kept briefly by that provider for abuse monitoring.
Renomo assesses your own profile for your own positioning, never to screen or judge other people. Your interview recording captures your voice for your Blueprint, not to identify you.
We keep your data only as long as we need it for the service and the law, never indefinitely for its own sake. You can have your account, and everything tied to it, deleted at any time.

What we process, and how it flows

Account. Your email (and a password hash) are held by our authentication service, which runs on our own infrastructure in Germany.
Your inputs. Your name, LinkedIn URL, phone number, and what you add at review (images, a writing sample, your plan details) are stored in our own database in Germany.
Payment. Handled by our payment processor. We store the outcome, never your card details.
Public profile lookup. Once per run, at your instruction, we look up the publicly available information on the LinkedIn profile at the URL you give us, the kind of detail anyone could see on your public profile or find through a web search, and store the result in our German database.
Voice interview. An AI interviewer calls the number you provide, placed and voiced by our voice-AI provider. You are told it is an AI and consent to recording at the start. The recording and transcript are stored in our database, and used only to capture your answers and how you speak for your Blueprint, never to identify you biometrically. The provider's copy expires within 30 days.
Assessment. Your profile information and interview are analysed by a large-language-model provider to produce your Authority Blueprint. Results are stored in our database.
Render. The Blueprint document is rendered on our own servers and stored in our own storage. The link you open is a short-lived signed URL.
Email. Sign-up, recovery, and delivery emails are sent through our email provider.
Marketing email. Only if you ask for it. You tick a box, we email you a confirmation link, and nothing is sent until you click it. You can turn it off again at any time in your account, in one step. Your Blueprint, receipts and password resets arrive either way and are not affected.
Hosting. Everything above runs on our own infrastructure in a German Hetzner data center.

Service providers

We rely on a small set of service providers (processors) to run the service. We list them here by name or category, with their role and location, and update this list when our providers change. Questions: info@pagebody.de.

Hetzner for the data center our own infrastructure runs in (EU, Germany).
Stripe for payment processing (EU entity; for any US transfer, the EU-US Data Privacy Framework).
ElevenLabs for the AI voice interview: placing the call, voicing Maya, and running the language model behind the live agent on its platform (United States; EU-US Data Privacy Framework where certified, otherwise the European Commission's Standard Contractual Clauses in our data-processing agreement. Its copy of the call is kept at most 30 days).
Google (the Gemini API) for the large-language-model analysis that produces your Blueprint (United States; EU-US Data Privacy Framework).
A web data provider for the one-time, automated retrieval (crawling) of the publicly available information on your LinkedIn profile (EU, Czech Republic).
Resend for transactional email (United States entity; EU-US Data Privacy Framework where certified, otherwise the European Commission's Standard Contractual Clauses in our data-processing agreement).

Legal bases (GDPR Art. 6)

Contract (Art. 6(1)(b)): the processing needed to deliver the Authority Blueprint you ordered (profile capture, interview, assessment, render, delivery).
Consent (Art. 6(1)(a)): recording the voice interview, and sending you marketing email if you asked for it and confirmed it. You may withdraw either at any time, and withdrawing is as easy as giving it.
Legitimate interests (Art. 6(1)(f)): security, abuse prevention, and keeping the service running.
Legal obligation: invoicing and tax records.

EU AI Act

You always know when you are dealing with AI. The voice interview is a conversational AI system. You are informed before the call and consent to it (transparency under Art. 50). The Blueprint and any content suggestions are AI-generated and labelled as such.
Risk tier. The service is a limited-risk AI use. It assesses your own profile for your own positioning. It is not for evaluating, screening, or making decisions about other people, and it is not used for any high-risk purpose under the Act (no employment, creditworthiness, biometric identification, or similar decisions).
Human oversight. Outputs are advisory. You review, edit, and approve them, and nothing is published to your LinkedIn without your action. We make no solely automated decision that produces a legal or similarly significant effect about you (GDPR Art. 22).

International transfers

Core data is hosted on our own infrastructure in Germany and our profile-capture provider is in the EU, so no transfer mechanism is needed there. Our payment, voice-AI, language-model, and email providers are in, or transfer data to, the United States. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses in our data-processing agreements.

How long we keep it

We keep your personal data only for as long as we need it to provide the service, run your account, and meet our legal obligations. We do not keep it indefinitely for its own sake.

You can delete your account yourself at any time, from the account menu inside the app. Deletion is immediate and cannot be undone. It erases your account and sign-in, your inputs, your runs, interviews, recordings, assessments and delivered Blueprints from our systems, including the PDF files, and it withdraws your marketing consent so nothing further is sent to you. You can also ask us to do it for you by emailing info@pagebody.de.
The voice provider's copy of the call expires within 30 days.
Invoices and tax records are kept for the statutory retention period under German commercial and tax law (section 147 AO and section 257 HGB), even after your account is deleted, because we are legally required to keep them. GDPR Art. 17(3)(b) provides for exactly this. They hold the amount, the date and the payment reference. They do not hold your Blueprints, and once your account is gone they are no longer linked to your name or your email address in our systems.

Your rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data, and to withdraw consent at any time (GDPR Art. 15 to 22). You may also lodge a complaint with a supervisory authority (for pageBody GmbH, the Hessen data-protection authority, HBDI).

Erasure is self-serve: the account menu inside the app deletes your account immediately. To exercise any of the others, email info@pagebody.de.