Privacy Policy.
We process personal data only where it is necessary to operate the website, respond to requests, and provide the tools you choose to use. We do not sell personal data.
Last updated: September 2026
Controller
Hosting and technical delivery
The website is created and hosted using Lovable. To deliver a page, the hosting infrastructure necessarily receives technical request data such as IP address, date and time, requested URL, referrer where supplied, browser and device information, and response status. This processing is necessary to deliver, secure, and troubleshoot the website.
The website’s fonts are served with the website itself and do not require a connection to Google Fonts. The website contains an external link to eva-cronjaeger.com; data is transferred to that site only if you follow the link.
Database and live commercial demo
Supabase infrastructure is used to provide controlled read-only data to the Commercial AI Director. The browser requests only the fields needed for the demo from the read-only view cad_public_opportunities. The website does not insert, update, or delete records through this connection.
When the live demo loads, the database provider receives ordinary connection data such as the user’s IP address and request metadata. The displayed opportunity data is labelled as controlled demo data and is not presented as real company data.
Supabase is not used by this connection to store visitor prompts, contact information, or Commercial AI Director outputs. A separate technically necessary authentication mechanism may use browser local storage if a user session exists. No public sign-up flow or user-facing account area is currently presented.
Interactive tools and AI processing
The AI Profit Scanner, AI Use Case Prioritizer, and Human × AI Workflow Mapper calculate results locally in the browser from the information you enter. The current source code does not send their form entries to a database or analytics service. Their results remain in the page state and disappear when the page is reloaded.
Clara is a rule-based digital guide to the Lab — not a chatbot and not autonomous. Clara does not use a generative AI model, does not answer open-ended questions herself, and no external AI model provider receives Clara interactions. Clara helps visitors explore relevant Lab tools, clarify their question and prepare an email to the team; a human reads and responds to every email. When you choose to contact Clara, the website opens your email application with a message addressed to clara@fromaitoprofit.com.
The website itself does not collect or store the email submission. If you send the draft, the information is processed through your email provider and the recipient’s email provider according to their respective terms and configurations.
The Commercial AI Director combines deterministic calculations with AI-assisted interpretation. Management questions and selected structured commercial facts can be sent server-side through the Lovable AI Gateway to the configured OpenAI model. The API credential remains server-side. The live opportunity interface also reads pre-computed diagnosis, evidence, hypotheses, and recommendations from the external read-only database view.
From AI to Profit does not intentionally persist Commercial AI Director prompts or outputs in its website database. Prompts and outputs remain temporarily in page state during the visit, and AI requests are sent with storage disabled at application level. AI-assisted requests may be processed by Lovable AI and its underlying AI providers. Provider-side technical logging, security processing, and retention may apply according to the respective provider’s terms and configurations.
AI systems can produce inaccurate, incomplete, or inappropriate output. The tools provide decision support, not automated decisions. Users remain responsible for independently checking outputs and making all business, legal, financial, and operational decisions.
Please do not submit confidential company information, trade secrets, passwords, credentials, special categories of personal data, or other sensitive information.
Automation and n8n
n8n is described on the website as a connectable orchestration layer. No active n8n webhook, request, or data transfer is present in the current website source code.
Contact requests
Current contact and briefing interactions use mailto: links. The website itself does not collect or store these submissions. If you choose to contact From AI to Profit by email, the information you send—typically your name, email address, organisation, message, and any optional context—is processed through your email provider and the recipient’s email provider to answer your request and manage the resulting correspondence.
Contact details are not automatically added to a newsletter or marketing list.
Messages are retained only as long as necessary for the request and any applicable legal obligations. No fixed period is stated because the appropriate period depends on the nature of the correspondence.
Cookies, local storage, and analytics
The current website has no analytics SDK, advertising pixels, behavioural tracking, marketing tags, consent-dependent tracking, or external font scripts. It does not set marketing cookies. Accordingly, no cookie consent banner is displayed.
A technically necessary authentication mechanism may use browser local storage only if a user session exists. This is not used for advertising or cross-site tracking. The Commercial AI Director’s read-only data connection has session persistence disabled.
Legal bases
Technical delivery and security are based on our legitimate interest in operating a reliable website. Contact data is processed to answer your request and, where relevant, to take steps before entering into an agreement. Any consent-based processing will rely on consent and may be withdrawn for the future.
Your rights
Subject to the requirements of the GDPR, you may request access, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time for the future.
You also have the right to lodge a complaint with a competent data protection supervisory authority. To exercise your rights, contact bjoern@fromaitoprofit.com.
Security and changes
Reasonable technical and organisational measures are used to protect information against accidental or unlawful access, alteration, loss, or disclosure. No internet service can guarantee absolute security.
This notice may be updated when the website, connected services, or legal requirements change. The date above identifies the current version. Our approach to responsible AI is explained on the AI & Data page.
Third-party services and external links
Services relevant to the current website architecture are Lovable infrastructure for website delivery, Supabase infrastructure for the verified read-only Commercial AI Director data connection, Lovable AI and OpenAI for AI-assisted Commercial AI Director requests, and the relevant email providers when a visitor actively sends an email.
The website does not currently use Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, Hotjar, Microsoft Clarity, or n8n as an active processor of visitor data.
External websites, including Eva Cronjäger’s website and LinkedIn where linked, receive ordinary connection data only when you actively follow the respective external link. These links are not embedded third-party tracking.