Privacy policy
How Regivio handles personal data. In short: no tracking, no advertising, no third-party cookies, and only the data the service needs.
1. Controller
VICO Ventures UG (haftungsbeschränkt)
Münchener Straße 37
85123 Karlskron
Germany
Email: richard.brauel@vico.ventures
Represented by Richard Brauel
2. Visiting the website
When you open a page, the server processes your IP address, the time, the page requested and your browser identifier to deliver the page and to protect the service against misuse. Legal basis is Art. 6 (1) (f) GDPR. These log entries are kept only as long as operation and security require. The website loads no external fonts, scripts or analytics tools.
3. Hosting
The service runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. Hetzner processes data on our behalf under a data processing agreement (Art. 28 GDPR).
4. Cookies
We use a single cookie, rgv_session, and only after you log in. It keeps you signed in for up to 30 days and cannot be read by scripts. It is strictly necessary for the account (§ 25 (2) TDDDG), so no consent is required. There are no tracking or advertising cookies.
5. Account and API
For an account we store your email address, your password as a salted hash, your API keys as hashes with a short visible prefix, and a monthly request counter. We need this to provide the service (Art. 6 (1) (b) GDPR). The data is kept until you ask us to delete your account; write to richard.brauel@vico.ventures.
6. Payments
Subscriptions are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives your email address and the payment details you enter directly on Stripe's pages; we do not see card details. Legal basis is Art. 6 (1) (b) and (c) GDPR. Stripe may transfer data to the USA on the basis of the EU-US Data Privacy Framework and standard contractual clauses. See stripe.com/privacy.
7. Personal data in register entries
Company records can contain names of natural persons, such as managing directors, together with their role and town, as published by official registers. We take this data only from official open-data registers (see data sources) and show it to make companies identifiable and verifiable, for example when checking business partners. Legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is the transparency intended by these public registers. The data is updated or removed when the source changes it. If you are named in a record, you may object at any time (Art. 21 GDPR); write to richard.brauel@vico.ventures.
8. Documents you upload
If you import an official register document in your account, we read the company data from it and store it as a company record that is visible like any other. The legal basis is Art. 6 (1) (f) GDPR.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Write to richard.brauel@vico.ventures. You can also lodge a complaint with a supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
As of November 2026