Legal
Privacy policy
This website runs without cookies, tracking, or advertising services. This policy explains what data we process, why we process it, and which service providers are involved.
Last updated: September 2026
This English version is provided for convenience. In case of doubt, the German version (Datenschutz) prevails.
Controller
The controller responsible for data processing on this website is Alae UG (haftungsbeschränkt), Walther-von-Cronberg-Platz 13, 60594 Frankfurt am Main, Germany, email leon.sticksel@alae-ai.com.
Hosting and visiting the website
We host this website with Vercel Inc., USA. When you visit the site, we and Vercel process technically necessary access data, in particular your IP address, time of access, requested page, browser, operating system, and technical request data. This processing is necessary to provide the website securely, reliably, and efficiently (Art. 6 (1) (f) GDPR).
Vercel processes this data under a data processing agreement pursuant to Art. 28 GDPR. That agreement includes the EU Standard Contractual Clauses for transfers to the United States. Under our current Vercel plan, runtime logs are generally available for up to one day. Data may be processed for longer where necessary to investigate a security incident or comply with legal obligations.
No cookies, no tracking
The website sets no cookies and uses no analytics or advertising services. Fonts, images, and 3D data are served by us; no content is loaded from third-party servers.
Your language choice and display options in the product demo are stored locally in your browser’s site storage. This information never leaves your device and is required to provide the display you selected (Section 25 (2) no. 2 of the German TDDDG).
Contact form and email
If you contact us via the contact form or by email, we process the data you provide (name, email address, optionally company and topic, and your message) to handle your inquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual inquiries and otherwise Art. 6 (1) (f) GDPR, based on our legitimate interest in responding to business inquiries.
The inquiry is delivered to our mailbox as an email. For this delivery we use Plus Five Five, Inc. (Resend), USA, as a processor under Art. 28 GDPR. Messages are dispatched through the Ireland region we selected, while Resend also processes account data and other data in the United States. Transfers to the United States are based on the EU Standard Contractual Clauses in the data processing agreement.
To prevent abuse, we use a hidden form field and limit requests based on the IP address. For this purpose, the IP address is held in the memory of the respective server instance for no more than ten minutes and is not stored permanently by our application. The technical logs described under “Hosting and visiting the website” may still be generated. We retain inquiries only for as long as necessary to handle them and any follow-up questions; statutory retention obligations remain unaffected.
Alae updates
If you request Alae updates, we process your email address to record your request and, after separate confirmation, send you occasional news about Alae and our products (Art. 6 (1) (a) GDPR). The request is delivered to us through the same service used for the contact form. You can withdraw your consent at any time with effect for the future, for example by emailing leon.sticksel@alae-ai.com. After withdrawal we remove your address from the list unless legal obligations require otherwise.
Product demo
The Cortex demo linked from this website works exclusively with fictitious sample data. Input entered in the demo is neither stored nor passed on to third parties.
Your rights
You have the right to access the data we hold about you, to rectification, erasure, and restriction of processing, to data portability, and to object to processing based on legitimate interests. Any consent you have given can be withdrawn at any time with effect for the future. To exercise these rights, contact leon.sticksel@alae-ai.com.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden.