Legal

Privacy Policy

Last updated: 2026-10-25

This policy explains what personal data we process through this B2B partner-discovery service, why we process it, and your rights under the GDPR.

Who we are

ASYP Handelsgesellschaft mbH, operating the uniquepixel brand, is the controller. Contact us at info@uniquepixel.org or see the Imprint.

What we process

Account data: username, email address, password hash, preferences, and security records.
Business research data: company domains, website metadata, tags, publicly available business contact details, and search criteria.
Technical data: session and CSRF cookies, security records, and application logs.
Connected AI assistants: when you connect an AI assistant through the Model Context Protocol (MCP), the name and callback address the assistant registers, the permissions you grant, and access and refresh tokens. Tokens are stored only as cryptographic hashes and expire (access tokens after one hour, refresh tokens after 30 days of non-use) or end when you disconnect the app.
Connected mailboxes: if you ask your assistant to connect your own mailbox, its address, server settings, login name, and password. The password is entered only on our website, encrypted before storage, and used only to connect to your mail provider.
Mailbox use: messages your assistant reads, and drafts or emails it writes, are processed on request and not stored by us; drafts and sent copies are stored in your own mailbox at your provider. We keep an activity record of drafts and sent emails (mailbox, recipients, subject, message identifier, related company domain, time, and the connected app) and your do-not-contact list.

Why we process it

Contract (Art. 6(1)(b) GDPR): to provide accounts, company research, search, requested exports, connected AI assistants, and connected mailboxes.
Legal obligation (Art. 6(1)(c)): to meet applicable record-keeping and compliance duties.
Legitimate interests (Art. 6(1)(f)): service security, abuse prevention (including send limits and the email activity record), reliability, and troubleshooting.
Consent (Art. 6(1)(a)): where a feature specifically asks for consent. We currently do not use optional advertising cookies.

Recipients and service providers

Data may be processed by our hosting and infrastructure providers. We do not sell personal data.

When you connect an AI assistant, the data it requests on your behalf (search results and, if you connected a mailbox, email content) is transmitted to that assistant and its provider. You choose the assistant; its provider processes this data under its own terms and privacy policy. Emails your assistant sends are transmitted through your own mail provider to the recipients you or your assistant choose.

Data of people you correspond with

Your mailbox contains personal data of other people, such as senders and recipients. We process it only on your instructions, through the assistant you connected, to provide the mailbox features. You are responsible for having a lawful basis for that processing and for the emails you send. Contact us if you need a data processing agreement.

Retention

We retain account data while an account remains active and delete it when no longer required, subject to statutory obligations and configured operational retention periods. Security records may be retained as needed to prevent abuse and resolve service issues.

Connected apps remain until you disconnect them under Settings → Connected apps. Mailbox settings and the encrypted password remain until you remove the mailbox under Settings → Mailboxes or delete your account; removing a mailbox deletes its password immediately. The email activity record and do-not-contact list remain while your account exists and are deleted with it.

Your rights

Subject to the GDPR’s conditions, you may request access (Art. 15), correction (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), or object to processing (Art. 21). You may also complain to a supervisory authority (Art. 77). You can disconnect AI assistants and remove mailboxes yourself at any time in your account settings. Contact info@uniquepixel.org to exercise these rights.

International transfers

If a provider processes data outside the EEA, the transfer must be covered by an adequacy decision, the EU Standard Contractual Clauses, or another lawful safeguard. AI assistants you connect may be operated outside the EEA; such transfers happen at your request under your agreement with the assistant's provider.

Cookies

See our separate Cookie Policy.