engenty.wizards
Search templates
Language

Privacy policy

What we process when you visit engenty.ai, leave your email address, use an engenty wizards account or run a wizard in the studio, and what rights you have under the GDPR. As of 6 October 2026.

Controller

Company
Thru The Heart Creative GmbH
Address
Kirchengasse 48/8
1070 Vienna
Austria
Company register
FN 546932m

What this covers

This policy covers the website engenty.ai with the template gallery at engenty.ai/wizards, the account at account.engenty.ai, our model gateway (gateway.engenty.ai), the studio on engenty.ai and wizards someone shares by link.

The engenty wizards app on your own computer processes your data there, with you. We only receive what you send us yourself: when you connect it to your account, use credits or publish a wizard. The app collects no usage statistics; it only queries our template gallery and checks GitHub for a new version.

Visiting the website

When you open engenty.ai, the server processes what your browser sends with every request: IP address, time, page requested, browser and operating system. We need this to deliver the pages and to keep them secure (Art. 6(1)(f) GDPR). Server logs are deleted after 14 days.

The site sets no cookies and uses no analytics or advertising tools. Fonts and images come from our own server. In your browser’s local storage it remembers only whether you closed the language hint and, if you entered one, the address of your own installation; neither leaves your browser.

A video from YouTube or Vimeo loads only when you click it. Only then do your IP address and your browser’s details go to Google (YouTube, in its no-cookie mode) or to Vimeo (with “Do Not Track”).

Download link by email

If you leave your email address on engenty.ai, we send you the install command, the first steps and information about engenty wizards, as you agreed (Art. 6(1)(a) GDPR). For this we store your email address, the language, the wording and time of your consent, and how many mails we sent you. The mails are sent through Resend; the data stays in the EU (Ireland).

You can withdraw your consent at any time: with the unsubscribe link at the end of every email or with an email to contact@engenty.ai. We then delete your address.

Your account

For an account we process your name, email address and profile picture. You sign in with a link by email or with Google or GitHub; the provider then passes us your name, email address, profile picture and the access data for signing in. We store no password.

With every sign-in we store the IP address and the browser to protect your account against abuse, and also your team, invitations to a team (with the invited person’s email address), your API keys and the programs you gave access. We need this to provide the account (Art. 6(1)(b) GDPR).

The account sets only cookies needed for signing in: the session cookie (30 days), short-lived cookies during a sign-in with Google or GitHub and, if you sign up with an invitation code, a cookie holding that code (24 hours).

To delete your account, write to contact@engenty.ai.

Credits and usage

When you use credits, we record for each call: time, team, person, wizard run, model, number of tokens or seconds, and the cost. We need this to charge the credits (Art. 6(1)(b) GDPR) and for our accounts (Art. 6(1)(c) GDPR). We do not store the content of your requests or the answers.

Payments

You buy credits through Stripe (Stripe Payments Europe, Ltd., Ireland). Stripe receives your email address, your team’s name, your billing address and, if you give one, your VAT number, and calculates the VAT. We never see card details. We keep the name, email address and amounts of every invoice as long as tax law requires (seven years).

AI and media services

engenty wizards uses the AI subscription or API key you connect in the app; those requests go straight from your computer to your provider, not through us.

Only when you use credits do your requests (texts, files, images) go through our model gateway: to the Vercel AI Gateway (Vercel Inc., USA), which passes them to the provider of the model you chose (such as OpenAI, Anthropic or Google), and for images and videos to fal.ai (Features & Labels, Inc., USA). These providers process the request to produce the answer. You see which provider runs a model when you choose it. For transfers to the USA we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s standard contractual clauses (Art. 45 and 46 GDPR).

Studio and shared wizards

When you run a wizard in the studio on engenty.ai or open a shared link, we store the inputs and results of that run so the wizard can carry on. Runs without signing in are deleted after 7 days, a wizard’s stored data after 400 days without use.

The studio sets a cookie for signing in (30 days) and, so that nobody starts a shared wizard’s runs without limit, a cookie with a random identifier of your browser (1 year). A wizard you share by link is visible to everyone who has the link.

Who processes data for us

ServiceWhat forWhere the data is
Hostinger International Ltd. (Cyprus)Servers of the website, account, gateway and studioFrankfurt, Germany
Turso (ChiselStrike, Inc., USA)Database of the accountsStockholm, Sweden
Resend, Inc. (USA)Sending the emailsIreland
Stripe Payments Europe, Ltd. (Ireland)Payments and invoicesEU, partly USA
Vercel Inc. (USA)AI models when you use creditsUSA and the model’s provider
Features & Labels, Inc. (fal.ai, USA)Images and videos when you use creditsUSA
Google Ireland Ltd., GitHub, Inc.Signing in, if you choose itEU and USA
We have contracts under Art. 28 GDPR with everyone who processes data on our behalf; Google and GitHub are controllers of their own for signing in.

How long we keep data

DataPeriod
Server logs14 days
Email address for the download linkuntil you withdraw your consent
Account, team, API keysuntil the account is deleted
Sign-in (session)30 days
Usage records, invoicesseven years (tax law)
Studio runs without signing in7 days
A wizard’s stored data400 days without use

Your rights

  • Access to the data we hold about you (Art. 15 GDPR)
  • Rectification of wrong data (Art. 16)
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Your data in a common format (Art. 20)
  • Objection to a processing (Art. 21)
  • Withdrawal of a consent, for the future (Art. 7(3))

Complaints

If you think we do not process your data correctly, write to us first at contact@engenty.ai. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

Austrian Data Protection Authority