What we collect, and what we do with it.

Who is responsible

ERG Ventures UG (haftungsbeschränkt), Burtscheider Straße 16, 52064 Aachen, Germany, is the controller for the processing described here. Contact: s.erguden@stirpio.com. Company details are in the legal notice.

Visiting this site

This site sets no cookies and runs no analytics or advertising scripts. It is hosted on Vercel. When you load a page, Vercel's servers process the technical data every web server needs to deliver a page: your IP address, the page requested, the time, and your browser's identifying string. Vercel keeps short-lived server logs for security and operation. We do not use these logs to identify individual visitors. Fonts are served from this site, not from a third-party font service.

Requesting the free trial or contacting us

If you send the request form, we receive what you typed: your name, company, business email, website and, if you add it, your phone number. We also record that you ticked the consent box, the exact consent text you saw, the time, and which page the form was on. The form is submitted only after you tick that box.

We use this to reply to you, to set up a short setup call, and, if you go ahead, to run the trial. The legal basis is the steps you asked us to take before a possible contract (Art. 6(1)(b) GDPR) and, for contacting you by phone or email about your request, your consent (Art. 6(1)(a) GDPR). You can withdraw that consent at any time by replying "no" or writing to the address above; one message ends it.

The form submission is delivered to us as an email through Resend, an email delivery provider, and lands in a mailbox we operate. We keep request data while your request is open and for up to twelve months after our last exchange, unless a contract follows. If it does, the data becomes part of the client record and is kept for the statutory retention periods that apply to business correspondence and invoices.

During the trial and the managed service

When Stirpio runs alongside your business line, we process data about the calls that reach that line: caller number, time, whether the call was answered, and, when a call is not picked up and our recovery step answers it, the details the caller gives so that your team can call them back. We use these to catch the calls your team misses, put them back in front of your team, and report what happened.

For that data you are the controller and we act on your instructions as a processor. We do not access your inbox, your CRM history or your other lines. We do not use caller data for anything other than your account, and we do not sell it. Systems involved are named in the setup documentation you receive before we connect anything; the platform we configure the routing and reporting on is a US-hosted business communications platform, and its telephony providers carry the calls. Automated answering, where it is part of your setup, identifies itself as automated in its first sentence.

If you stop after the trial, we disconnect and delete the trial data within days, except for what we must keep to document the engagement itself (dates, what was connected, that it was disconnected). If you continue, the data is kept for as long as you are a client and deleted afterwards on the same basis.

Email we send to businesses

We contact businesses in the United States by email about Stirpio. We write to business addresses published by those businesses. Every message names us, gives our postal address and tells you how to stop further messages: reply "no" and we stop. We do not use open or click tracking in those messages.

Where data goes

Vercel (hosting and the form endpoint) and Resend (email delivery) process data on our behalf under data processing terms; both operate in the United States and the European Union. Our own mailboxes are hosted in the European Union. For clients in the United States, call data is processed by the communications platform and telephony providers described in your setup documentation, in the United States. Where data leaves the European Union, it does so under the standard contractual clauses or the EU–US Data Privacy Framework, as applicable to the provider.

Your rights

You can ask what we hold about you, ask us to correct or delete it, ask us to restrict how we use it, object to processing based on our legitimate interests, and receive the data you gave us in a portable form. Write to s.erguden@stirpio.com. You also have the right to complain to a data protection authority; for us that is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Düsseldorf, Germany.

If you are in the United States, we do not sell personal information and we do not share it for cross-context behavioural advertising. Requests under state privacy laws can be sent to the same address.

Changes

If this page changes in a way that matters, the date at the top changes with it. We do not move the goalposts quietly.