Privacy policy

DenkNova checks the websites of local businesses and uses AI to take over recurring work such as social media posts, ads and the chat on the website. We process only the data this needs. We use no analytics or advertising trackers and never sell data.

Who is responsible

GLOWING CUBE UG (haftungsbeschränkt) (DenkNova), Mörfelder Landstraße 114, 60598 Frankfurt am Main, Germany.

E-mail: inbox@glowingcube.com

Phone: +49 151 40165184

Visiting the website

When you open a page, our server records what is technically needed: IP address, time, the page and the browser. We use this only to run the website securely and to find errors, and delete it once it is no longer needed for that.

The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Website check

When you enter a website address, we read publicly available information about that website and the business: its pages, public search and map listings, and comparable businesses nearby. From this we prepare the report.

The legal basis is your request (Art. 6(1)(b) GDPR) and our legitimate interest in using public information for the comparison (Art. 6(1)(f) GDPR).

Requests through the website

When you write to us through a form of the website (a first talk, the website analysis, an appointment), we process what you enter: your name, the kind of business, a phone number or an e-mail address, your message, your website’s address, the page’s language and the place on the page the request came from. The request goes to our team; we use it only to answer you.

When you write to us on WhatsApp or call us, the terms of that provider apply as well (WhatsApp is a service of Meta).

The legal basis is your request (Art. 6(1)(b) GDPR).

Account, sign-in, appointments and chat

For your account we store your name, e-mail address and website. You sign in with a code sent by e-mail or, if you set one in the dashboard, with a password; we store the password only as a secure hash. For a call we store your name, e-mail address and the time you choose.

Chat messages are first answered by an AI assistant. We keep the conversation so our team can help further if needed.

The legal basis is the contract or your request (Art. 6(1)(b) GDPR).

Cookies and local storage

We only use what the website needs to work (Section 25(2) TDDDG), so no consent is required:

Fonts

This website loads its font from Google Fonts (Google Ireland Limited). Your IP address is sent to Google; a transfer to the USA is possible and covered by the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a consistent presentation (Art. 6(1)(f) GDPR).

Our services

When you order a service, we process your business details, orders and payments and, depending on the service:

We store access data and access tokens encrypted. The legal basis is the contract (Art. 6(1)(b) GDPR).

Instagram, Facebook and Threads

You can connect your Instagram account, your Facebook Page and your Threads profile through Meta's official login. You decide there which permissions DenkNova receives. We receive the account or Page ID, the account name and an access token.

We use this access only to publish the posts of your weekly plan at the scheduled times and to show you their status. When you connect a Facebook Page, we fill in its empty details (description, phone, e-mail, website, imprint) once with your business details; what is already there stays unchanged. We do not read private messages. We do not share the data or use it for advertising.

We delete the access token when you disconnect or ask for deletion. Meta's privacy policy applies to data held by Meta.

Until a Facebook Page is connected through the official login, you sign in in a separate browser profile that we use only for your business. The sign-in stays there until you end it or ask for deletion.

Google Search Console

You can connect your Google Search Console through Google's official login. DenkNova receives only read access to Search Console and your Google e-mail address, so you can see which account is connected.

Once a day we read your website's clicks, impressions and positions on Google and show them to you in the dashboard. We change nothing in your Search Console, do not share the data and do not use it for advertising. DenkNova's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We store the access token encrypted. When you disconnect in the dashboard, we revoke the access at Google and delete the token; the figures already read stay in your account.

Payments

Online payments are handled by a payment service provider; we never receive card details. For bank transfers we process the details of your payment. We keep invoices for as long as tax and commercial law requires.

Service providers

We use carefully selected service providers and, where required, sign data processing agreements with them:

If a provider is outside the EU (for example in the USA), data is transferred only on the basis of an adequacy decision (such as the EU-US Data Privacy Framework) or EU standard contractual clauses.

How long we keep data

We keep your data while your account exists or the service runs. After that we delete it within 30 days, unless statutory retention periods require longer.

Having your data deleted

In the dashboard you disconnect any connected account yourself (“Remove”, for Google “Disconnect”); we then delete the access token. At the provider itself you remove DenkNova's access like this:

To have all your data deleted by us – including access tokens – write from your account's e-mail address to inbox@glowingcube.com with the subject “Data deletion”. We delete it within 30 days and confirm by e-mail. Only data we must keep by law (such as invoices) stays, blocked, until that period ends.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw consent at any time for the future. An e-mail to us is enough.

You can also complain to a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information in Wiesbaden.

To the home page