Privacy policy

1. Controller

The controller for data processing on this website within the meaning of the GDPR is HBW Softwares UG (haftungsbeschränkt), Sigbertstraße 5, 51427 Bergisch Gladbach, Germany, email hi@lagias.com.

2. Visiting the website

The marketing site is hosted by Vercel Inc. When you open a page, your browser transmits data that the hosting provider processes to deliver it: IP address, the page requested, the time of the request, referrer, browser and operating system. This is necessary to serve the site and to keep it secure.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in operating a working, secure website.

3. Analytics, and what the cookie banner actually decides

We use PostHog to count page views and understand which pages help. PostHog is configured to store and process data on servers in the European Union.

Consent does not switch analytics on and off — it switches whether we may store an identifier on your device. If you decline, or before you answer, PostHog runs in memory-only mode and the handbook pages use an identifier that exists for one page view and is never stored. Your visit is counted; you are not recognisable on your next visit. If you accept, an identifier is stored in a first-party cookie so repeat visits and the step from this site into the product can be recognised as one person.

Recorded either way: page URL, path, host, referrer, and coarse browser information. We do not record form contents, and we do not sell or share this data with advertisers.

Legal basis: Art. 6 (1) (a) GDPR (your consent) for storing the cookie; Art. 6 (1) (f) GDPR for the aggregate, non-identifying page count. You can withdraw consent at any time by deleting the cookies for this site in your browser, which restores the unanswered state and shows the banner again.

4. Waitlist

If you join the waitlist we process the email address you enter, and — only if you choose to add it — the free-text idea you would test first. We use it to invite you when access opens and to decide which ideas to support first. We do not send unrelated marketing.

Waitlist entries are stored in Google Sheets via Google Apps Script, operated by Google Ireland Limited.

Legal basis: Art. 6 (1) (b) GDPR — steps taken at your request prior to entering into a contract. We keep entries until launch and delete them at the latest twelve months after the waitlist closes, or immediately on request.

5. The product application

If you create an account at app.lagias.com, we process your email address for authentication, either by one-time code or through Google sign-in, together with the research briefs you submit and the results produced for them. That application and its API run on servers of Hetzner Online GmbH in Germany.

Legal basis: Art. 6 (1) (b) GDPR — performance of the contract for the service you are using.

6. Recipients and processors

• Vercel Inc., USA — hosting of the marketing site
• PostHog (EU region) — product analytics, data stored in the European Union
• Google Ireland Limited — waitlist storage and Google sign-in
• Hetzner Online GmbH, Germany — hosting of the application and its API

Each acts as a processor under a data processing agreement. Where a transfer to the United States takes place, it is based on the EU standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

7. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future. To exercise any of these, write to hi@lagias.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

8. Changes

We update this policy when the processing it describes changes. The date below is the version you are reading.