2. General notes on data processing
This website consists of static HTML pages. It uses no analytics, tracking or marketing tools. Fonts are served from our own server, not from Google or other third parties. The only embedded third-party service is the chat assistant (see below).
The following sections describe which data is processed during a visit and on which legal basis (information duty under Article 13 GDPR).
3. Hosting and server logfiles
The website, the live demo (demo.softwarefabrik.io) and the licence server (license.softwarefabrik.io) run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre.
When a page is requested, the web server (nginx) stores the following access data in log files:
- IP address
- date and time of access
- requested address and HTTP status code
- amount of data transferred
- referrer URL
- user agent (browser and operating system)
The purpose is technical delivery, stability and security (e.g. defending against attacks). The legal basis is Article 6(1)(f) GDPR. Log files are rotated daily and deleted automatically after 14 days.
4. Contact
If you contact us by email, the data you transmit are processed to handle your request. This typically includes your email address, the content of your message and possibly further voluntarily disclosed information.
The contact form — including the request for the single-seat starter package — opens your e-mail program with a prepared message to info@softwarefabrik.io; nothing is transmitted automatically. We only receive your details once you send the message.
Processing serves the handling of your inquiry. Legal basis is depending on the case Art. 6 (1) (b) or Art. 6 (1) (f) GDPR.
5. Cookies and similar technologies
The website itself sets no cookies and stores nothing in your browser.
Exceptions: the live demo sets a technically necessary session cookie (see the live demo section). Whether the chat assistant widget stores data in your browser depends on the provider (see the AI chatbot section). Technically necessary storage is permitted without consent under § 25(2) TDDDG.
6. AI chatbot (TrustChat)
An AI-assisted chat assistant provided by TrustChat is embedded on every page of this website. It answers questions about the Agentic Software Factory based on the public website content and the public project documentation.
Two distinct processing operations are involved:
- On every page load, the widget script is fetched from
trustchat.de. Technically unavoidably, your browser transmits your IP address and usual connection data (user agent, referrer) to the provider — even if you never open the chat. - Only when you use the chat are the messages you type transmitted to TrustChat and processed there to produce an answer. Please do not enter personal or confidential data into the chat — neither your own nor that of third parties.
The provider's servers are located in Nuremberg, Germany. Whether
TrustChat uses further processors to generate answers, and where those process data,
should be asked there — a chat assistant generally relies on a language model that
is not necessarily operated in the same place. Legal basis, data processing agreement and
retention period follow the agreement with the provider; details and TrustChat's own
privacy notice are available at
trustchat.de. If you
wish to avoid transmission to the provider, do not use the chat and block the loading of
trustchat.de in your browser.
7. Live demo
An instance of the software runs at demo.softwarefabrik.io for trying it out. Every visitor is signed in automatically as the shared user demo; no personal account is created. For this, the demo sets a session cookie that expires when you close the browser.
Whatever you enter in the demo (projects, texts, settings) is stored in the demo database and is visible to other visitors of the demo. The demo is fully reset every night at 04:00 UTC, deleting all entries. Please do not enter personal or confidential data there. The demo's application logs are rotated daily and deleted after 7 days.
The legal basis is Article 6(1)(f) GDPR (providing a test environment at your request).
8. Licence server
A self-hosted installation of the software contacts the licence server license.softwarefabrik.io to activate and renew its licence. The following is transmitted:
- the e-mail address you entered; the server does not store it in plain text, only as a salted SHA-256 hash,
- a device fingerprint, already hashed on your machine,
- the software version and the country of the request (two-letter country code),
- for technical reasons, the IP address (server log files, see above).
The purpose is issuing and checking the licence (including limiting the Community licence to three devices). The legal basis is Article 6(1)(b) GDPR (licence agreement). The data is stored as long as the licence exists; you can request deletion at any time by e-mail to info@softwarefabrik.io. The air-gap variant makes no connection to the licence server.
9. External links
This website may contain links to external sites. When clicking such links, users leave this website. The respective operators are responsible for the content and data processing on external sites.
10. Data subject rights
Data subjects have, subject to the legal prerequisites, in particular the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to lodge a complaint with a data protection authority
The GDPR obliges controllers to inform data subjects transparently about the processing of their personal data.
11. Status
Status: 11 November 2026. This statement is updated whenever the services in use change.