Privacy Policy
Last updated: April 3, 2026
1. Introduction
sherpa AI GmbH ("sherpa AI," "we," "us," or "our"), located at Leopoldstraße 31, 80802 Munich, Germany, is the data controller responsible for processing your personal data. We are committed to protecting your privacy and handling your data in compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
2. Data We Collect
We may collect the following categories of personal data:
- Contact information: name, email address, phone number, and company name when you request early access or contact us.
- Usage data: information about how you interact with our website, including pages visited, time spent, browser type, and device information.
- Communication data: content of emails or messages you send to us.
- Booking data: scheduling information when you book a call through our Cal.com integration.
3. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR Article 6(1):
- Consent (Art. 6(1)(a)): when you voluntarily provide your data through our early access form or booking system.
- Legitimate interest (Art. 6(1)(f)): to improve our website, ensure security, and communicate with prospective customers.
- Contract performance (Art. 6(1)(b)): to provide services you have requested or to take steps prior to entering into a contract.
4. How We Use Your Data
We use your personal data to: respond to your inquiries and early access requests; schedule and conduct meetings; improve and optimize our website; communicate with you about our services; comply with legal obligations; and protect our legitimate business interests.
5. Third-Party Services
We use the following third-party services that may process your data:
- Vercel: website hosting and analytics (USA, with appropriate safeguards).
- Cal.com: meeting scheduling and booking.
- Google Fonts: web fonts served by Google (no cookies set).
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.
6. Cookies
Our website uses only technically necessary cookies required for the website to function. We do not use tracking cookies or third-party advertising cookies. The Cal.com booking embed may set its own cookies necessary for its functionality.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Contact and booking data is retained for the duration of our business relationship and for up to 3 years thereafter, unless a longer retention period is required by law.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you.
- Right to rectification: request correction of inaccurate data.
- Right to erasure: request deletion of your data ("right to be forgotten").
- Right to restrict processing: request that we limit how we use your data.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interest.
- Right to withdraw consent: withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at [email protected].
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
10. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for sherpa AI GmbH is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.
12. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].