Privacy Policy

Introduction

With the following privacy policy, we would like to inform you about which types of your personal data (hereinafter also referred to as "data") we process for which purposes and to what extent.

Responsible Party

Eastfeller UG (haftungsbeschränkt)

Fasanenweg 5a, 65451 Kelsterbach, Germany ·hello@dispo-hub.de

Contact

For privacy questions, contact us at the address above or by email.

Rights of Data Subjects

You have the right to information, correction, deletion, restriction of processing, data portability and objection.

Types of Data Processed

Account and profile data, contact data, business content, usage data, and technical metadata and communications data.

Purposes of Processing

Providing the website and DispoHub SaaS, performing contracts, user-initiated integrations, IT security, abuse prevention, and support.

DispoHub SaaS and business data

When DispoHub is used, we process the account, customer, carrier, vehicle, driver, shipment, tour, document, invoice, task, and schedule data entered for the relevant tenant. Scope and visibility depend on tenant, role, and permissions. Legal bases include Article 6(1)(b) GDPR for contract performance and Article 6(1)(f) GDPR for secure and auditable operation.

ChatGPT/OpenAI integration

The optional DispoHub app for ChatGPT is activated only after an explicit account connection. For a request, the inputs and selected DispoHub data needed to fulfil it are sent to OpenAI and results are returned to ChatGPT. DispoHub write actions execute only after a preview and explicit confirmation. DispoHub does not store complete ChatGPT conversations, but retains connection, approval, and action records required for security and auditability. Processing inside ChatGPT is also governed by the privacy terms and settings of the relevant OpenAI account or workspace.

Recipients and processors

We use selected hosting, database, email, document, mapping, analytics, and support providers. These may include Supabase, Netlify, OpenAI (only when the ChatGPT integration is enabled), Resend, DocRaptor, and TomTom. Providers receive data only as needed for their service and under an appropriate contractual basis.

International transfers

Depending on the selected function, providers may process data in the United Kingdom, the United States, or other countries outside the European Economic Area. Transfers take place only under an adequacy decision, appropriate safeguards such as EU Standard Contractual Clauses, or another lawful basis.

Retention

Tenant and contract data is generally retained for the contract term and then for applicable commercial and tax retention periods. Revoked OAuth connections are disabled and deleted when security and evidence obligations no longer apply. MCP approval and action records are generally retained for no more than 24 months unless an incident or legal obligation requires longer retention. Website and support data is deleted when no longer needed and no retention duty applies.

Your controls

ChatGPT connections can be disconnected at any time in DispoHub and in the relevant ChatGPT workspace. Administrators can remove the “Use ChatGPT” permission by role. You may also exercise your statutory privacy rights by contacting hello@dispo-hub.de.

Website, cookies, and analytics

Technically required data is processed to provide the website securely. Optional analytics or marketing technologies are used only in line with the consent settings shown to you. Consent can be withdrawn at any time through the cookie settings.