Privacy Policy

Effective October 3, 2026

This site, juergenpretsch.com, is operated by Pretsch Management & Consulting LLC, 1850 Amsterdam Avenue, New York, NY 10031, USA (“we”, “us”). Questions about this policy: juergen@juergenpretsch.com.

We keep this short and specific. It describes what we actually collect, why, and what you can do about it.

1. What we collect and why

When you write to us through the site. The intake form asks for your name, email address, company or role, what you need, a budget range, your preferred language and a message. The form also records where you came from (referring page and campaign parameters such as utm and gclid values) so we know which channel reached you. We use this to answer you, to decide whether we are a fit, and to measure our advertising. Legal basis for EU visitors: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in measuring our marketing (Art. 6(1)(f) GDPR).

When you request a Rescue Check. The request form on /app-rescue asks for your name, email address, your app’s URL, the platform it was built with, whether it is live, what’s broken and how urgent it is. Like the intake form, it records where you came from (referring page and campaign parameters such as utm and gclid values). We use this to answer you, to agree how access works and to measure our outreach. Legal basis for EU visitors: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in measuring our marketing (Art. 6(1)(f) GDPR).

When you email yourself a Safe to launch? result. The check itself runs in your browser and nothing is sent while you answer. Only if you ask for the result by email do we store your email address, your ten answers, the score and the campaign parameters of your visit, so we can send the result and follow up. Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in measuring our marketing (Art. 6(1)(f) GDPR).

When you request a free spot check. The form on /source-audit asks for your name, your email address, what kind of text it is and the citations you paste. Like the other forms, it records where you came from (referring page and campaign parameters such as utm and gclid values). We use this to check the citations, send you the verdicts and measure our outreach. Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in measuring our marketing (Art. 6(1)(f) GDPR).

When you ask for an E-2 plan outline. The form asks for your email address and, optionally, your first name and visa type, and records the page you sent it from, the gclid value of your visit, the referral link you came through and basic browser information. We use this to send you the outline and follow up. Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in measuring our marketing (Art. 6(1)(f) GDPR).

When you email yourself a Reality Check or O-1 Evidence Map result. Both tools run in your browser and nothing is sent while you answer. Only if you ask for the result by email do we store your email address, your name if you give it, your answers, the result, the link you came through and the campaign parameters of your visit. If you arrived through a link that carries a law firm’s name, that firm receives your result together with your name and email address, and the notification we receive leaves your name and email address out. Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in measuring our marketing (Art. 6(1)(f) GDPR).

When a law firm sets up a white-label check. The form on /attorneys asks for the firm’s name, a contact name and email address, the website, the preferred link name, the case types and any notes, and records the page it was sent from, the gclid value and basic browser information. We use this to set up the firm’s link and stay in touch about it. Legal basis: steps prior to a contract (Art. 6(1)(b) GDPR).

Abuse protection. Every form also stores a one-way hash of your IP address so we can limit repeated submissions. The hash cannot be turned back into your address.

When you book a call. The booking calendar is embedded from a third-party scheduling service, Calendly, and appears only on the booking pages (/start, /de/start, /before-your-cto and /de/vor-dem-cto) and on the confirmation page after a purchase. It loads with the page. Calendly receives your name, email address, the time you pick, your IP address and basic browser information, plus the campaign parameters of your visit (such as utm values) and the page the booking came from, which we pass on so we know which channel reached you. It sends both of us a calendar invitation. That service’s own privacy policy applies to its processing. The calendar is part of the booking itself rather than an advertising or analytics tool, so it is not covered by the consent banner; it loads only on those pages.

When you pay. Payments run through Stripe. We never see or store your card number. Stripe sends us your name, email address, the amount and the payment status. Legal basis: performance of a contract.

When we work together. During an engagement we receive whatever you send us: documents, drafts, interviews, business information. We use it only to deliver the work. Confidentiality terms are in our Terms of Service and in any NDA we sign. Manuscripts sent for a source audit are deleted 30 days after delivery and never used to train AI models.

When you visit. We use the built-in analytics of our hosting provider, Lovable, which reports aggregate page views and traffic sources and does not identify you. Our hosting provider also records server logs (IP address, browser, pages requested, timestamps) for security and to keep the site running; these are kept for a short period and then deleted. Legal basis: legitimate interest in running a secure website.

Visit statistics. We also use Plausible Analytics, a cookieless, privacy-friendly service hosted in the European Union. It counts visits and page views without cookies, without personal data and without tracking you across other sites. Because it stores nothing on your device and identifies no one, no consent is needed for it. Legal basis: legitimate interest in understanding how the site is used.

Advertising measurement. If you arrive through an ad on Google, Microsoft Bing or ChatGPT and later book a call, send a form or buy, we record that conversion so we know the ad worked. We use the Google tag, Microsoft Advertising’s UET tag and OpenAI’s measurement pixel for this. For visitors in the EU, the UK and Switzerland they load only if you accept them in the consent bar; without your consent no advertising cookies are set. Elsewhere they load when you visit. You can withdraw consent at any time by clearing the site’s storage in your browser. Legal basis: consent (Art. 6(1)(a) GDPR) where required, otherwise legitimate interest.

Newsletter. If we offer email updates and you sign up, we store your email address and send you what you signed up for. Every email has an unsubscribe link. Legal basis: consent.

We do not sell personal data. We do not buy data about you from third parties. We do not profile you.

2. Who else sees it

We use a small number of service providers who process data on our behalf and under contract:

• Lovable (site hosting) and Supabase (database and email delivery infrastructure): store form submissions and site data.
• Calendly: call scheduling.
• Stripe: payments.
• Lovable: built-in aggregate visit statistics.
• Plausible Analytics: cookieless visit statistics, hosted in the European Union.
• Google (Google Ads, Google tag), Microsoft (Microsoft Advertising UET tag) and OpenAI (measurement pixel): advertising measurement, only with your consent where consent is required.
• Law firms: if you use a check link that carries a firm’s name, that firm receives your result as described in section 1.
• Email and document tools we use to communicate with you and deliver the work.

We share personal data beyond these providers only if the law requires it, or to protect our rights or safety.

3. Where it goes

We are based in the United States, and our providers process data mainly in the US. If you are in the EU, the UK or Switzerland, your data is transferred to the US. Where a provider is certified under the EU-US Data Privacy Framework we rely on that; otherwise we rely on the European Commission’s standard contractual clauses. You can ask us for details.

4. How long we keep it

• Inquiries that do not lead to an engagement: 24 months, then deleted.
• Engagement records, contracts and invoices: as long as the engagement lasts and afterwards for as long as tax and commercial law require (in the US typically seven years).
• Working files from an engagement: deleted or returned at your request after completion, unless we need them to defend a legal claim.
• Analytics: Lovable holds aggregate statistics only, with no personal data.
• Server logs: held by our hosting provider, Lovable, as part of its security logging, which Lovable states it retains for up to one year.
• Source audit manuscripts: deleted 30 days after delivery.

5. Your rights

Everyone can ask us what personal data we hold about them, ask us to correct or delete it, and object to our use of it. If you are in the EU, the UK or Switzerland you also have the rights to restrict processing, to data portability, to withdraw consent at any time, and to complain to your local data protection authority. If you are a resident of a US state with a privacy law, you have the rights that law gives you, including the right to know, delete and correct, and to opt out of the sale or sharing of personal data; we do not sell or share personal data in that sense.

To exercise any right, email juergen@juergenpretsch.com. If you are in the EU, you can also contact our EU representative named in section 10. We will respond within 30 days, or sooner where the law requires it. We may ask you to verify your identity first.

6. Cookies and similar storage

The site itself sets no cookies. The consent bar stores your choice in your browser’s local storage so it does not ask again. If you consent to advertising measurement, Google, Microsoft and OpenAI set their measurement cookies or similar browser storage according to their own policies. The scheduling and payment services set their own cookies on their own pages.

7. Children

This site and our services are for businesses and adults. We do not knowingly collect data from anyone under 18.

8. Security

Data is transmitted over HTTPS, stored with providers that use encryption at rest, and accessible only to us and the providers named above. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

9. Changes

When we change this policy we update the date at the top. Material changes are announced on the site.

10. Contact

EU representative under Art. 27 GDPR: