Privacy Policy
Effective date: May 27, 2026 · Version 1.1
Introduction
In plain language: This policy explains what data we collect when you use GetTraffic, why we collect it, and what rights you have. We are a German company and fully comply with GDPR.
1ds.io UG (haftungsbeschränkt) ("we", "us", "GetTraffic") takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website https://www.gettraffic.ai, use the GetTraffic platform, or interact with us.
We comply with the EU General Data Protection Regulation (GDPR), the German Digitale-Dienste-Gesetz (DDG), the Telekommunikation-Telemedien-Datenschutz-Gesetz (TTDSG), and all other applicable data protection laws.
By using GetTraffic, you acknowledge this Privacy Policy. If you do not agree with our data practices, please do not use the service.
Data controller
The data controller responsible for processing your personal data is:
1ds.io UG (haftungsbeschränkt)
Hongkongstrasse 1
20457 Hamburg, Germany
Represented by: Christian Kaspar (Managing Director)
Phone: +49 40 228599 600
Email: privacy@gettraffic.ai
Register court: Amtsgericht Hamburg
Register number: HRB 165660
Data we collect
In plain language: We collect data you give us (like your name and email), data from your use of the platform (like which features you use), and technical data from your device (like your IP address).
Data you provide to us
- Account data: Name, email address, company name, password (hashed)
- Billing data: Processed by our Merchant of Record. We do not store credit card details. The specific Merchant of Record entity is disclosed at checkout.
- Content data: Website content, product information, keywords, and competitor data you connect to GetTraffic for content generation and SEO processing
- Communication data: Messages you send via contact forms, email, or support channels
Data collected automatically
- Usage data: Features used, pages visited within the app, timestamps, frequency of use
- Device and technical data: IP address, browser type and version, operating system, screen resolution, language settings
- Server log files: Automatically collected by our hosting provider for security and stability
- Cookie data: See the Cookies section below
Data from third parties
- Payment confirmations: Our Merchant of Record sends us transaction confirmations (no card data)
- Analytics data (cookie-free): Aggregated, IP-anonymized usage patterns from Plausible Analytics (no cookies, no personal data stored on your device)
- Analytics data (cookie-based): Aggregated usage patterns from Google Analytics 4 and Microsoft Clarity (only with your consent via the cookie banner)
Legal basis for processing
In plain language: We always need a legal reason to process your data. Here is what reason applies to each type of processing we do.
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the GetTraffic platform | Performance of contract (Art. 6(1)(b)) |
| Account creation and management | Performance of contract (Art. 6(1)(b)) |
| AI-powered content generation | Performance of contract (Art. 6(1)(b)) |
| Payment processing (via our Merchant of Record) | Performance of contract (Art. 6(1)(b)) |
| Customer support and communication | Performance of contract / Legitimate interest (Art. 6(1)(f)) |
| Website analytics (Plausible Analytics - cookie-free, IP-anonymized) | Legitimate interest (Art. 6(1)(f)) - no consent required |
| Website analytics (Google Analytics 4, Microsoft Clarity) - via cookie consent | Consent (Art. 6(1)(a) + TTDSG § 25(1)) |
| Server log files and security | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails (if opted in) | Consent (Art. 6(1)(a)) |
| Legal compliance and fraud prevention | Legal obligation (Art. 6(1)(c)) |
How we use AI
In plain language: GetTraffic uses artificial intelligence to draft and optimize SEO content clusters that you review and approve before they are published to your website. Here is exactly how that works with your data.
- Content generation: Your website content, product information, keywords, and competitor data you connect to GetTraffic is processed by AI models to generate SEO-optimized content clusters. This processing is essential to deliver the service.
- Third-party AI providers: We use external AI model providers (such as OpenAI and Anthropic) to process content, acting as data processors under GDPR.
- No training on your data: We do not use your content, keywords, competitor data, or any personal data to train or fine-tune AI models.
- AI-generated output ownership: All AI-generated content created through your GetTraffic account belongs to you.
- Automated decisions: GetTraffic does not make automated decisions with legal or similarly significant effects on individuals (GDPR Art. 22).
Cookies and tracking technologies
In plain language: We use Cookiebot to ask for your consent before any analytics cookies are set. Only one cookie (CookieConsent) loads without consent - it stores your choice. Analytics cookies from Google Analytics 4 and Microsoft Clarity only fire if you accept the Statistics category. You can withdraw consent anytime via the cookie settings link in the footer.
We use cookies and similar technologies in accordance with TTDSG § 25. Strictly necessary cookies (TTDSG § 25(2)) load without consent. All other cookies require your prior consent (TTDSG § 25(1) and GDPR Art. 6(1)(a)), managed via Cookiebot by Usercentrics A/S (Denmark).
Necessary cookies (1)
This cookie is required to store your consent choice. No consent is needed (TTDSG § 25(2)).
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| CookieConsent | gettraffic.ai (set by Cookiebot / Usercentrics A/S) | Stores your cookie consent choice for this domain | 1 year |
Statistics cookies (4)
Statistics cookies only fire after you accept the Statistics category in our cookie banner. They help us understand how visitors use the site so we can improve it. Legal basis: consent (GDPR Art. 6(1)(a) + TTDSG § 25(1)).
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 (Google Ireland Ltd. / Google LLC) | Distinguishes unique users | 2 years |
| _ga_# | Google Analytics 4 (Google Ireland Ltd. / Google LLC) | Maintains session state | 2 years |
| _clck | Microsoft Clarity (Microsoft Corporation) | Persistent user ID for behaviour analytics and heatmaps | 1 year |
| _clsk | Microsoft Clarity (Microsoft Corporation) | Session ID for behaviour analytics | 1 day |
Scope of this declaration
This cookie declaration applies to the marketing website at www.gettraffic.ai. The authenticated product at app.gettraffic.ai uses separate session and authentication cookies for sign-in via Keycloak; those are governed by the in-app privacy notice surfaced at sign-in.
Third-party services and subprocessors
| Service | Purpose | Data location | Safeguards |
|---|---|---|---|
| Netlify, Inc. | Website hosting | USA | EU-US Data Privacy Framework / DPA |
| Merchant of Record (disclosed at checkout) | Payment processing | EU / UK | DPA / Adequacy Decision |
| Cloudflare, Inc. | CDN, security | Global | EU-US Data Privacy Framework |
| OpenAI / Anthropic | AI content generation | USA | DPA with zero-retention / EU-US DPF |
| Google Ireland Ltd. / Google LLC | Website analytics (Google Analytics 4) | Ireland / USA | EU-US Data Privacy Framework / SCCs |
| Microsoft Corporation | Behaviour analytics and heatmaps (Microsoft Clarity) | USA | EU-US Data Privacy Framework / SCCs |
| Usercentrics A/S | Cookie consent management (Cookiebot) | Denmark / Ireland | EU (GDPR-compliant) |
| Plausible Analytics OÜ | Cookie-free website analytics (IP-anonymized) | EU (Estonia / Germany) | GDPR-compliant, EU-based, no personal data stored |
Data retention
| Data type | Retention period | Reason |
|---|---|---|
| Account data | Duration of contract + 30 days | Service delivery |
| Content and keyword data | Duration of contract + 30 days | Service delivery, data export period |
| Billing and invoice data | 10 years after transaction | German tax retention (AO § 147) |
| Server log files | 30 days | Security and troubleshooting |
| Support communications | 3 years after resolution | Legitimate interest |
Your rights under GDPR
In plain language: You have strong rights over your data. You can access, correct, delete, or export your data at any time.
- Right of access (Art. 15): Request a copy of all personal data we hold about you
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
- Right to restriction (Art. 18): Request that we limit how we process your data
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to object (Art. 21): Object to processing based on legitimate interest, including direct marketing
- Right to withdraw consent (Art. 7(3)): Withdraw any consent you gave at any time
To exercise any of these rights, contact us at privacy@gettraffic.ai. We will respond within 30 days as required by GDPR.
Right to lodge a complaint:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
datenschutz-hamburg.de
Security
We implement appropriate technical and organizational measures to protect your personal data, including SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls and role-based permissions, and regular security reviews.
Contact
For any privacy-related questions, data subject requests, or to request our Data Processing Agreement (DPA), contact us:
Email: privacy@gettraffic.ai
Phone: +49 40 228599 600
Address: 1ds.io UG (haftungsbeschränkt), Hongkongstrasse 1, 20457 Hamburg, Germany