M45 Privacy Policy

Last Updated: October 22, 2025

This Privacy Policy ("Policy") explains how M45 ("M45", "we", "us", "our") collects, uses, shares, and protects personal data in connection with https://m45.tech (the "Website") and any related services (the "Services").

M45 is currently in an early development stage and not yet incorporated as a separate legal entity. Until formalization, personal data is controlled by Florian Wolf, acting as the data controller for the M45 project. You can contact him at florian.wolf@m45.tech.

Nothing in this Policy limits your statutory privacy rights.

We may update this Policy periodically. When we make material changes, we will post a notice on the Website and, if required by law, notify you directly.

1. Personal Data We Collect and Why

(a) Information You Provide

Website forms: name, email, company, job title, and any other data you submit (e.g., demo or "stay updated" requests).
Direct contact: information you share by email, chat, or at events/webinars.
Public sources: professional data from LinkedIn or other publicly available profiles relevant to outreach or collaboration.

(b) Automatically Collected Data

IP address, browser type, device information, pages visited, and timestamps (via standard server logs or analytics).
Cookies and similar technologies for analytics or essential site functionality (see Section 9).

(c) Purposes and Lawful Bases

Purpose	Example Activities	Legal Basis (GDPR Art. 6)	Retention (typical)
Provide and operate Website / respond to requests	Demo sign-up, contact form replies	Contract / pre-contractual steps	Up to 24 months after last contact
Improve and secure the Services	Analytics, debugging, anti-fraud	Legitimate interests	As long as necessary for security
Marketing communications	Email updates, event invites	Consent	Until withdrawn
Compliance and legal obligations	Respond to authorities, enforce rights	Legal obligation / legitimate interest	As required by law
Research and model improvement	Use of anonymized or de-identified data for analytics or AI R&D	Legitimate interest (applies only to anonymized data)	Indefinite (non-personal data only)

We do not train AI models on identifiable user data.

2. How We Protect Your Data

We implement reasonable technical and organizational measures, including:

Encryption in transit and at rest (TLS / AES-256).
Access controls limited to authorized personnel.
Regular backups and security monitoring.

No online system is fully secure; please use strong passwords and secure networks when communicating with us.

3. Data Retention

We keep personal data only as long as necessary for the purposes listed above or as required by law. If you request deletion, we will erase or anonymize your data unless retention is legally required (e.g., accounting or dispute defense).

4. How We Share Personal Data

We may share data with:

Service providers – e.g., cloud hosting (Vercel, AWS or GCP), analytics, CRM, email delivery.
Affiliates and collaborators – only if relevant to ongoing partnerships, under written data-processing terms.
Authorities or regulators – if required by law or to protect rights and security.
Business transfers – in the event of a merger, acquisition, or sale of assets, in accordance with applicable data-protection safeguards.
Your consent – where you have explicitly agreed to such sharing.

We do not sell or share personal data for cross-context behavioral advertising.

5. International Data Transfers

Your data may be processed in the United States, European Union, or other jurisdictions.

When data is transferred internationally, we ensure adequate protection through:

Participation in the EU-US Data Privacy Framework (where applicable); and/or
Execution of Standard Contractual Clauses (2021/914/EU) with additional safeguards.

6. Your Rights

Depending on your location, you may have the right to:

Withdraw consent at any time.
Access and obtain a copy of your personal data.
Request correction or deletion ("right to be forgotten").
Object to or restrict certain processing.
Data portability in a structured, machine-readable format.
Lodge a complaint with your local data-protection authority (e.g., in the EU, with your national DPA).

To exercise any of these rights, contact florian.wolf@m45.tech. We may request additional information to verify your identity before acting on your request.

7. Use by Children

Our Website and Services are not directed to individuals under 18. We do not knowingly collect their data. If you believe we hold such data, contact us for deletion.

8. Third-Party Services

Our Website may include links or integrations with external services (e.g., LinkedIn, X, YouTube). These services have their own privacy policies, which govern their data practices. We encourage you to review them.

9. Cookies and Analytics

We use essential cookies for site functionality and limited analytics cookies to understand Website usage. You can manage cookies via your browser settings. Where legally required, we will obtain consent before placing non-essential cookies.

10. California Residents (CPRA Notice)

Under the California Consumer Privacy Rights Act (CPRA), California residents have rights to:

Know what categories of personal information we collect (identifiers, professional information, internet activity).
Request deletion, correction, or access.
Opt out of the sale or sharing of personal information (we currently do not sell or share data).

Requests may be sent to florian.wolf@m45.tech.

We do not respond to "Do Not Track" signals.

11. Contact

Until M45's incorporation is complete, privacy inquiries are handled by:

Controller: Florian Wolf (for the M45 project)

Email: florian.wolf@m45.tech

Jurisdiction: Germany / European Union

Summary

M45 collects limited contact and usage data to operate and improve the Website and to communicate with interested professionals. We do not sell personal data, and we limit retention, access, and use to legitimate business purposes. If you have any concerns, contact us at the address above.