Privacy Policy

Last updated: October 15, 2026

Denker in plain language:This policy covers our website, the Denker workspace and desktop app on Windows and macOS, and the Denker Browser Companion extension. Workspace content is stored in our backend. Screen context, files and transcribed text can be sent to a connected provider or Denker's managed AI service when used in a request. Whisper audio transcription runs on your device; Windows system dictation can use Microsoft's online service. Analytics, diagnostics and connected services are described below.

Common questions →

1. Data Controller

Denker AI UG (haftungsbeschränkt)
Fibigerstraße 141b
22419 Hamburg, Germany

Email: [email protected]
Phone: +49 179 240 9963

2. Overview of Data Processing

We process the following data to operate our website, workspace, desktop app and connected features.

Types of Data Processed

  • Contact data (e.g., email addresses)
  • Account details, settings and billing-related records
  • Projects, tasks, conversations, uploads and work memory
  • Screen context, speech audio and transcripts when you use those features
  • Connected-service data relevant to your requests
  • Usage and diagnostic data (e.g., pages visited, feature interactions and errors)
  • Meta/communication data (e.g., device information, IP addresses)

Categories of Data Subjects

  • Visitors to our website
  • Newsletter subscribers
  • Workspace and desktop app users
  • People whose information users include in content or connected services

Purposes of Processing

  • Provision of our website and its content
  • Provision of accounts, workspace storage, AI assistance and connected-service features
  • Responding to contact requests and communicating with users
  • Security, billing, troubleshooting and service improvement
  • Usage measurement and analytics as described in the website and desktop sections below
  • Anonymous usage counts created on our server for every account, to measure and improve the service
  • Newsletter delivery (only with your consent)

3. Legal Bases

Below we inform you about the legal bases of the GDPR on which we process personal data:

  • Consent (Art. 6(1)(a) GDPR) — You have given your consent to the processing (e.g., for cookies or newsletter).
  • Contract Performance (Art. 6(1)(b) GDPR) — Processing is necessary for the performance of a contract.
  • Legal Obligation (Art. 6(1)(c) GDPR) — Processing is necessary to comply with a legal obligation.
  • Legitimate Interests (Art. 6(1)(f) GDPR) — Processing is necessary for the purposes of our legitimate interests.

4. Security Measures

Public website and workspace connections use HTTPS. Account authentication and access controls protect account and workspace features. Attachment access uses the links described in the desktop section below.

5. Data Processing on Our Website

5.1 Website Provision

Hosting services process technical request information to deliver the website and diagnose availability or security problems. This information can be recorded in server logs.

Technical request information can include:

  • IP address
  • Date and time of the request
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Website from which the request originates
  • Operating system and browser information

The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision of the website.

5.2 Hosting

Our website is hosted with Vercel. Website hosting is separate from the Denker workspace backend described below. Third-party services used by the website and app may process data outside the EU.

For more information, see Vercel's privacy policy.

5.3 Support Chat

If you open website support chat, we load HubSpot's chat service to handle your conversation. HubSpot can process the messages and contact details you provide, together with technical information needed to deliver chat. Our chat configuration disables HubSpot analytics and advertising tracking; opening chat does not accept marketing cookies.

5.4 Search Performance Tools

We use Google Search Console and Bing Webmaster Tools to verify website ownership and review search performance, indexing and crawling reports. Ownership verification through DNS records or a verification file does not itself install visitor analytics or session recording on our website. Microsoft Clarity's separate website tracking is described below.

6. Website Cookies and Analytics

6.1 Essential Cookies

We use technically necessary cookies to ensure the basic functions of our website. These cookies are set without your consent as they are essential for the operation of the website.

6.2 Website Usage Analysis (PostHog)

We use PostHog's EU service for cookieless audience measurement, including before you choose Accept and after you choose Decline. This measures pages visited, referring domains, campaign labels and macOS or Windows download attempts. Query strings, advertising click identifiers and full referrer URLs are excluded from these events. Download attempts do not establish completed installations.

Basic measurement does not store analytics identifiers in cookies, local storage or session storage, create person profiles, or record your screen. PostHog processes the request IP address, browser user agent and hostname to generate a hash with a daily rotating salt, then discards the IP address before event enrichment. These counts cannot reliably recognize returning visitors across days.

If you select Accept, a separate PostHog instance enables interaction analytics and session replay using cookies and local storage. This may include pages, clicks, device information and entry attribution. An analytics identifier may accompany a link to our browser workspace to connect consented usage. Cookieless traffic identifiers are never included in that handoff.

You can withdraw optional consent through Cookies in the footer. Withdrawal stops replay and interaction tracking, clears analytics persistence and reloads the page to unload optional tracking tools. Basic cookieless measurement continues; previously sent events are not erased. Website choices do not control desktop app analytics.

Basic audience measurement serves our legitimate interest in understanding website traffic (Art. 6(1)(f) GDPR). Optional interaction tracking and replay rely on consent (Art. 6(1)(a) GDPR).

6.3 Google Tag Manager

After you select Accept, we load Google Tag Manager to manage website tags, including our Microsoft Clarity integration. Tag Manager is separate from Google Search Console and does not by itself mean Google Analytics or Google Ads is enabled.

If Google Analytics or Google Ads tags are enabled, their behavior depends on the configured tags and Google Consent Mode. Our website keeps Tag Manager unloaded before you accept and updates Google Consent Mode when you accept or decline.

You can withdraw your consent at any time by clicking on “Cookies” in the footer.

6.4 Marketing (LinkedIn Insight Tag)

With your consent, we use the LinkedIn Insight Tag for conversion and reach measurement and to show you relevant ads on LinkedIn.

LinkedIn provides this service and can receive technical request and interaction information when its tag loads. The legal basis is your consent (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time by clicking on “Cookies” in the footer.

6.5 Website Interaction Analytics (Microsoft Clarity)

With your consent, we use Microsoft Clarity to understand website interactions through heatmaps and session recordings. This can include pages visited, clicks, scrolling, device and browser information, and displayed page content. Recording and masking depend on the Clarity project configuration.

Clarity tracking is restricted to our production website and excludes preview pages. You can withdraw consent using “Cookies” in the footer.

Microsoft provides this service and may process data outside the EU. See Microsoft's privacy statement for details.

7. Desktop App and Workspace

This section covers Denker on Windows and macOS and its connected backend services. Some processing takes place on your device, while workspace storage, AI requests, connected services and telemetry can involve remote services.

7.1 Accounts and Workspace Content

We process account details and settings, projects, tasks, conversation messages, uploaded files, and saved or generated work memory to provide the workspace and assistant features. This content is stored in Denker's backend. The backend and uploaded content are hosted with Hetzner in Finland (EU), separately from the Vercel-hosted website and third-party processing described in this policy.

If you choose Google sign-in, Google handles authentication and shares profile information, such as your name and email address, with Denker. For paid subscriptions, Stripe processes checkout and payment details. Denker sends Stripe account information, including your email, name and account identifier, and stores subscription and billing-related records.

The optional "Email me product news and tips" box on the sign-up screen is described in section 8, Newsletter and Requested Emails.

Uploaded attachments are served through unguessable links without a sign-in requirement. Anyone who receives an attachment link can access that file, so share these links only with intended recipients.

7.2 Screen Context, Files and AI Providers

When you use screen context or attach files, Denker can upload that content to its backend and include relevant content in requests to your selected or configured AI service. This can be a provider you connect yourself or Denker's managed AI service. The managed service uses OpenRouter, which routes requests to the selected model provider. Prompts and task context, including relevant conversation content, can be sent to these services to carry out your request. Review screen context and attachments before including sensitive information.

Provider processing depends on the provider, account and settings you use. The provider's own terms and privacy policy also apply to its processing. Where memory embeddings are enabled, memory and search text is sent to OpenAI to generate representations used for semantic retrieval.

7.3 Connected Services

When you connect another service, Denker uses that connection to perform requested actions and retrieve relevant content through the integration provider and connected service. For example, the Composio integration provider handles supported service connections and tool requests. Retrieved content can become part of your task or conversation context and can be included in relevant AI requests.

Connected services process data under their own terms and privacy policies. Disconnect services you no longer want Denker to access.

7.4 Speech and Dictation

Whisper transcription processes audio on your device. Windows system dictation uses Microsoft's online speech service when that engine is selected. Transcribed text may subsequently be sent to an AI provider when you submit it or use AI rewriting. Rewriting can also include your rewrite instructions and vocabulary.

Denker keeps recent dictation text and associated marked screenshots on your device for recovery and retry. It retains the latest three entries, replacing older ones. Signing out attempts to clear this recent history. Downloaded speech models remain in app data across updates. Temporary Whisper audio files are ordinarily deleted after transcription; explicitly enabled audio debugging can preserve them locally.

7.5 App Analytics and Diagnostics

App telemetry depends on your installed version. Older builds, including Preview 0.7.11, can send product analytics and error reports automatically without separate app privacy choices. Preview 0.7.11 can record interactions in expanded workspace views through PostHog; input fields are masked, but other displayed content can appear in recordings. Sentry can collect sampled performance data and error-related session replays, with text, inputs and media masked.

Older browser workspace builds also load the LinkedIn Insight Tag automatically for usage and conversion measurement. The 0.7.12 workspace update removes that tag. Website cookie choices do not disable tracking in those older workspace builds.

Denker 0.7.12 keeps optional product analytics and webview error reports off until you choose them separately in Settings > Preferences > Privacy. These controls are available in the released Windows and macOS app. Product analytics uses PostHog's EU service and can include installation and account identifiers, account email and name after login, IP address, app version, operating system and feature interactions. This choice also controls optional product events from your account on the updated backend. Webview error reports use Sentry. Third-party services may process data outside the EU; using an EU backend or analytics endpoint does not mean all processing stays in the EU.

Newer versions of the app and the browser workspace show an unticked “Share usage and error reports” checkbox when you create an account. If you tick it, product analytics and webview error reports are turned on. Product analytics is on for the new account from the moment it is created, including the server event that records the sign-up, and on the device where you signed up. Error reports are a device setting and are turned on for the device where you signed up. If you leave it unticked, both stay off; the anonymous usage counts described below are sent either way. Signing in to an existing account does not change your choices. You can switch product analytics and error reports off separately at any time in Settings > Preferences > Privacy. A device on which you have never made an analytics choice does not withdraw the choice saved with your account.

Separately from these choices, our backend sends anonymous usage counts to PostHog for every account, so we know how many people sign up, go through onboarding, send prompts and use features, and how often tasks succeed or fail. Each count is created on our server and contains only what happened, the app version, whether it came from the app or the browser workspace, and fixed categories such as the AI tool used or the type of error. A count carries a new random identifier each time, is not linked to your account or your device, and contains no account identifier, email address, name, IP address or content from your work. Nothing is read from or stored on your device for these counts. We rely on our legitimate interest in measuring and improving the service (Art. 6(1)(f) GDPR). You can object at any time by emailing [email protected]; we then stop sending counts for your account.

Denker 0.7.12 disables session replay and native error reporting. Opting into webview error reports does not enable either. Webview error-event filters remove request bodies, cookies and query strings. These measures do not mean that all diagnostic information is free of personal data.

PostHog session recordings are currently configured with a 30-day retention period. Deletion after recordings expire may take additional time. This period does not describe retention of all analytics events, error reports or workspace content.

Denker 0.7.12 relies on consent (Art. 6(1)(a) GDPR) for optional app analytics and webview error reports. You can withdraw these choices in Privacy settings. Withdrawal stops new optional collection; it does not automatically erase data already received by a provider. Website cookie choices apply to the website and do not control app telemetry, including older builds. Backend operational error reporting is separate and is used for service reliability and security.

7.6 Retention, Deletion and Your Controls

Workspace content and uploads have no automatic time-based expiry. They remain stored until deleted through the applicable account or content controls. Removing a reference to an attachment does not necessarily delete its stored file. Routine database backups are rotated by age; historical backups can remain longer. Account deletion does not immediately remove copies in existing backups.

You can delete your account in Settings > Account. Denker removes associated backend records and attempts to remove uploaded files, revoke integration connections and delete the Stripe customer record. External cleanup can fail and may require follow-up. Account deletion also clears specified local settings and recent dictations.

Deleting your Denker account does not automatically delete every copy held by AI, analytics, diagnostic, billing, email or connected-service providers, backups, provider CLI history, or downloaded speech models on your device. Those copies and files may require separate controls or deletion requests. The 30-day session-recording setting does not define retention of analytics events, error reports or billing records. Anonymous usage counts are not linked to your account, so they cannot be found or deleted with it and remain after account deletion. Contact us for help with deletion requests and retained data.

Review permissions available for Denker in your operating system's privacy settings. Settings > Help links to this policy and email support. For privacy questions or requests, email [email protected].

7.7 Denker Browser Companion

The Denker Browser Companion extension connects Chrome and other Chromium browsers to the Denker desktop app on macOS or Windows. It acts only on requests from the Denker app on your computer. Denker works in background tabs it opens itself, in tabs you hand over to it with the extension's toolbar button, or in a separate browser profile you choose to use for Denker (where all its web tabs are eligible), and in pop-up windows (such as a sign-in) that a page opens while Denker works in it. For the tasks you request, it reads pages, navigates, clicks, types, selects, scrolls, drags, answers page dialogs, uploads files the task names and saves files the task asks for. It does not read page content or send page-input actions to browser settings, extension pages or extension stores. When you ask, it can also bring Denker's window to the front, resize it or zoom its page.

Chrome asks for debugger access when you install the extension. Denker attaches the debugger only when a step needs it: trusted keyboard or mouse input (including drags and the mouse wheel), a page dialog, a file upload or files dropped on a page, a download, a screenshot or starting media. It can also attach to wake a frozen task tab or recover an unresponsive page read. While attached, it can supplement control names and roles from the browser's accessibility tree. It detaches it a few seconds after that request finishes. While it is attached, the browser shows a bar saying that the extension is debugging the browser. Cancelling that bar stops debugger use in that tab while the tab stays open. Most page reads and actions run as scripts packaged in the extension.

For the tabs Denker works in, this can process tab titles and full URLs, page text, links and form controls in the page and its embedded frames, screenshots, page dialog messages, the text Denker types for your task, and the names, full paths and progress of files those tabs download for it. To match those files and avoid repeating a download, the extension receives browser download events and checks recent download metadata locally. It reports details only for downloads associated with Denker's work by matching metadata. Depending on the page, this content can include names, contact details, messages, location, health, financial or authentication information. Password-field values are excluded from page reads, but task inputs, visible page text, screenshots and URLs can still contain sensitive information. To match browser windows on your screen, once you have agreed, the extension also tells the Denker app each window's position and size and a freshly salted hash of its current tab's title, rather than the title itself, never from a private window. It also tells the app its own version, the browser's name and version and a random identifier for the browser profile.

This data passes through a local native connection to the Denker app. Relevant content can become task or conversation context processed by Denker's backend and your selected or configured AI service. Denker's managed AI service uses OpenRouter and the selected model provider, as described in section 7.2. The extension has no separate server connection and sends no analytics. Requested website navigation and downloads use the browser's network connection. In the browser's extension storage it keeps only tab and window identifiers, a random identifier for the browser profile and its own settings, never page content.

Before Denker first works in your browser, the extension's welcome page explains this and asks you to agree; until you do, Denker can't work there. Withdrawing consent on the extension's options page blocks new requests; a request already running may finish. You can also cancel debugging from the browser's bar, close the tabs Denker opened, quit Denker, or remove the extension. Ending access does not erase information already included in a task, conversation or provider history. The retention and deletion controls in section 7.6 apply to stored workspace content; provider histories and backups can require separate deletion requests. For privacy requests, contact [email protected].

The Denker Browser Companion's use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this data only to provide your requested browser assistance and for the necessary operation, reliability and security of that feature. Transfers to our service providers and the selected AI service are limited to providing this feature.

We do not sell this data, use it for advertising, determine creditworthiness or lending eligibility, or allow it to be used to train general-purpose AI models. Human access is limited to your explicit consent for specific information, necessary security investigations, legal requirements, or aggregated and anonymised information used for internal operations. Remote transfers use encrypted connections, and production storage and backups containing this data are encrypted at rest.

8. Newsletter and Requested Emails

You can choose to subscribe to product updates. We process your email address, subscription choice and related signup information to deliver those messages. You can also request a download link without opting in to ongoing updates.

When you create a Denker account, you can tick "Email me product news and tips". The box is unticked by default, and signing in to an existing account never changes it. If you tick it, we record on your account that you did, with the wording you agreed to and the time, as proof of your consent. We may then send you product news and tips. Every such email contains an unsubscribe link, or you can email [email protected]. Deleting your Denker account removes this record.

We also send account verification, password recovery and other service emails. Resend handles email delivery and subscription management, receiving the recipient address, message content and delivery information needed for that service. Newsletter and optional onboarding follow-ups have separate subscription choices.

You can withdraw your consent to the newsletter at any time, using the unsubscribe link in every newsletter or by emailing [email protected]. Deleting your Denker account does not end a subscription made on our website, so please use the link in any newsletter. The lawfulness of the data processing that has already taken place remains unaffected by the withdrawal.

Legal basis: for newsletter subscriptions and product news, Art. 6(1)(a) GDPR and § 7(2) No. 2 UWG (consent); for keeping the record of your consent, Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.

9. Your Rights

You have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR) — You have the right to obtain information about your data stored with us.
  • Right to Rectification (Art. 16 GDPR) — You have the right to have inaccurate data corrected.
  • Right to Erasure (Art. 17 GDPR) — You have the right to request the deletion of your data.
  • Right to Restriction (Art. 18 GDPR) — You have the right to request the restriction of processing.
  • Right to Data Portability (Art. 20 GDPR) — You have the right to receive your data in a transferable format.
  • Right to Object (Art. 21 GDPR) — You have the right to object to the processing of your data.
  • Right to Withdraw Consent (Art. 7(3) GDPR) — You have the right to withdraw your consent at any time.
  • Right to Complain (Art. 77 GDPR) — You have the right to lodge a complaint with a supervisory authority.

10. Data Protection Contact

If you have any questions about data protection, you can contact us at any time:

Email: [email protected]
Phone: +49 179 240 9963

11. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply for your next visit.