Privacy policy
What we process when you visit engenty.ai, leave your email address, use an engenty wizards account or run a wizard in the studio, and what rights you have under the GDPR. As of 6 October 2026.
Controller
- Company
- Thru The Heart Creative GmbH
- Address
- Kirchengasse 48/8
1070 Vienna
Austria - Company register
- FN 546932m
- contact@engenty.ai
What this covers
This policy covers the website engenty.ai with the template gallery at engenty.ai/wizards, the account at account.engenty.ai, our model gateway (gateway.engenty.ai), the studio on engenty.ai and wizards someone shares by link.
The engenty wizards app on your own computer processes your data there, with you. We only receive what you send us yourself: when you connect it to your account, use credits or publish a wizard. The app collects no usage statistics; it only queries our template gallery and checks GitHub for a new version.
Visiting the website
When you open engenty.ai, the server processes what your browser sends with every request: IP address, time, page requested, browser and operating system. We need this to deliver the pages and to keep them secure (Art. 6(1)(f) GDPR). Server logs are deleted after 14 days.
The site sets no cookies and uses no analytics or advertising tools. Fonts and images come from our own server. In your browser’s local storage it remembers only whether you closed the language hint and, if you entered one, the address of your own installation; neither leaves your browser.
A video from YouTube or Vimeo loads only when you click it. Only then do your IP address and your browser’s details go to Google (YouTube, in its no-cookie mode) or to Vimeo (with “Do Not Track”).
Download link by email
If you leave your email address on engenty.ai, we send you the install command, the first steps and information about engenty wizards, as you agreed (Art. 6(1)(a) GDPR). For this we store your email address, the language, the wording and time of your consent, and how many mails we sent you. The mails are sent through Resend; the data stays in the EU (Ireland).
You can withdraw your consent at any time: with the unsubscribe link at the end of every email or with an email to contact@engenty.ai. We then delete your address.
Your account
For an account we process your name, email address and profile picture. You sign in with a link by email or with Google or GitHub; the provider then passes us your name, email address, profile picture and the access data for signing in. We store no password.
With every sign-in we store the IP address and the browser to protect your account against abuse, and also your team, invitations to a team (with the invited person’s email address), your API keys and the programs you gave access. We need this to provide the account (Art. 6(1)(b) GDPR).
The account sets only cookies needed for signing in: the session cookie (30 days), short-lived cookies during a sign-in with Google or GitHub and, if you sign up with an invitation code, a cookie holding that code (24 hours).
To delete your account, write to contact@engenty.ai.
Credits and usage
When you use credits, we record for each call: time, team, person, wizard run, model, number of tokens or seconds, and the cost. We need this to charge the credits (Art. 6(1)(b) GDPR) and for our accounts (Art. 6(1)(c) GDPR). We do not store the content of your requests or the answers.
Payments
You buy credits through Stripe (Stripe Payments Europe, Ltd., Ireland). Stripe receives your email address, your team’s name, your billing address and, if you give one, your VAT number, and calculates the VAT. We never see card details. We keep the name, email address and amounts of every invoice as long as tax law requires (seven years).
AI and media services
engenty wizards uses the AI subscription or API key you connect in the app; those requests go straight from your computer to your provider, not through us.
Only when you use credits do your requests (texts, files, images) go through our model gateway: to the Vercel AI Gateway (Vercel Inc., USA), which passes them to the provider of the model you chose (such as OpenAI, Anthropic or Google), and for images and videos to fal.ai (Features & Labels, Inc., USA). These providers process the request to produce the answer. You see which provider runs a model when you choose it. For transfers to the USA we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s standard contractual clauses (Art. 45 and 46 GDPR).
Studio and shared wizards
When you run a wizard in the studio on engenty.ai or open a shared link, we store the inputs and results of that run so the wizard can carry on. Runs without signing in are deleted after 7 days, a wizard’s stored data after 400 days without use.
The studio sets a cookie for signing in (30 days) and, so that nobody starts a shared wizard’s runs without limit, a cookie with a random identifier of your browser (1 year). A wizard you share by link is visible to everyone who has the link.
Who processes data for us
| Service | What for | Where the data is |
|---|---|---|
| Hostinger International Ltd. (Cyprus) | Servers of the website, account, gateway and studio | Frankfurt, Germany |
| Turso (ChiselStrike, Inc., USA) | Database of the accounts | Stockholm, Sweden |
| Resend, Inc. (USA) | Sending the emails | Ireland |
| Stripe Payments Europe, Ltd. (Ireland) | Payments and invoices | EU, partly USA |
| Vercel Inc. (USA) | AI models when you use credits | USA and the model’s provider |
| Features & Labels, Inc. (fal.ai, USA) | Images and videos when you use credits | USA |
| Google Ireland Ltd., GitHub, Inc. | Signing in, if you choose it | EU and USA |
How long we keep data
| Data | Period |
|---|---|
| Server logs | 14 days |
| Email address for the download link | until you withdraw your consent |
| Account, team, API keys | until the account is deleted |
| Sign-in (session) | 30 days |
| Usage records, invoices | seven years (tax law) |
| Studio runs without signing in | 7 days |
| A wizard’s stored data | 400 days without use |
Your rights
- Access to the data we hold about you (Art. 15 GDPR)
- Rectification of wrong data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Your data in a common format (Art. 20)
- Objection to a processing (Art. 21)
- Withdrawal of a consent, for the future (Art. 7(3))
Complaints
If you think we do not process your data correctly, write to us first at contact@engenty.ai. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.