Privacy policy
Last updated: October 26, 2026
Who we are
Anysetter is operated by superview llc. For this website we are the controller of the processing of the personal data described here. You can reach us at [email protected]. Full company details are in the imprint.
Visiting this website
When you open a page, our server processes your IP address, the page requested, the time, and your browser type and version, in order to deliver the page and keep it secure. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). These logs are deleted after 14 days.
Storage in your browser
Some storage is needed to show the site the way you asked for: if you choose a language, we remember that choice in a cookie for one year, and your light or dark display setting and your answer to the cookie notice are kept in your browser's local storage. These are not sent to us for any other purpose. Google Analytics sets cookies only as described in the next section. We use no advertising cookies.
Website analytics (Google Analytics)
We use Google Analytics to see how this website is used, for example which pages are read and how visitors find them, so that we can improve it. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC in the USA may also process the data. Google Analytics sets the cookies _ga and _ga_3EJNNPK3SL in your browser, which expire after two years, and receives details of your visit: the pages you view and when, the page you came from, your device and browser, and an approximate location derived from your IP address. Google Analytics does not log or store IP addresses. We have not switched on Google signals or any advertising features, and we do not combine this data with other data. Google keeps the data for two months. In the EU, the EEA, the United Kingdom and Switzerland, Google Analytics is loaded only after you choose Accept in the cookie notice. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Elsewhere it is loaded on the basis of our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR). You can withdraw your consent or object at any time under Cookie settings at the bottom of every page; we then switch the analytics off and delete its cookies. Google's privacy policy: https://policies.google.com/privacy
Booking a demo and contacting us
When you book a demo or write to us, we process your name, email address, company and what you tell us, to answer and prepare the call. The legal basis is taking steps towards a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering your request (Art. 6(1)(f) GDPR). The booking page may be provided by a scheduling service, whose own privacy policy applies there. We keep this correspondence for as long as needed for the conversation and any resulting contract, and beyond that only where the law requires us to.
Leads of our customers
When a business uses Anysetter to write to its leads, that business is the controller of the leads' data and we act as its processor under a data processing agreement (Art. 28 GDPR). We store lead data and chats on servers in the EU. How long chats are kept is set by the business. Leads who want to exercise their rights should contact the business that wrote to them; we support our customers in answering such requests, including export and deletion.
Google Calendar
A business using Anysetter can connect its Google Calendar so that calls are booked straight into it. We then access that Google account through Google's APIs, only with the permissions the business grants on Google's consent screen, and only to book its calls and keep track of them: We read the list of calendars, so the business can choose which calendar calls are booked into and which calendars count as busy. We read the free and busy times of the chosen calendars, so a lead is only offered times that are free. We see when a time is taken, not what is planned in it. We create an event for each call we book, with the lead's name and, if the lead gave one, the lead's email address as a guest. Google then sends the lead the invitation. We read, change and delete only these events, for example to notice that a call was moved or deleted in Google Calendar or that the lead declined it. Other events in the calendar are neither read nor changed. We read the ID of the Google account, to recognise the account when it is connected again. We store the access tokens in encrypted form, the IDs of the chosen calendars, the account ID and the IDs of the events we created. Free and busy times are used for the booking at hand and not stored. The provider of AI text generation receives only the times a lead is offered and the time of the lead's booked call, never entries from the calendar. We do not use data from Google APIs to develop, improve or train generalised AI or machine learning models. We do not sell it, use it for advertising or pass it on, except where needed to provide this feature, to comply with the law, or with the business's prior consent as part of a merger or sale. We only look at it ourselves with the business's permission for a support request, or where security or the law requires it. The business can disconnect the calendar in Anysetter's settings at any time. We then revoke our access at Google and delete the tokens. Access can also be removed in the Google account at https://myaccount.google.com/connections. The legal basis for the business's data is the performance of our contract (Art. 6(1)(b) GDPR). For the lead's data we act as the business's processor, as described above. Anysetter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Service providers
We use the following providers, who process data only on our instructions: Hetzner Online GmbH, Germany: hosting of our servers in Falkenstein. Cloudflare, Inc., USA: delivery and protection of this website. Google Ireland Limited, Ireland: website analytics with Google Analytics, as described above. Sendinblue SAS (Brevo), France: sending emails such as sign-in codes. A provider of AI text generation, which writes the replies on behalf of our customers. It is named in the data processing agreement. The complete, current list of sub-processors is part of the data processing agreement and available on request. WhatsApp messages are delivered by Meta Platforms Ireland Ltd., through each customer's own WhatsApp Business account and under Meta's terms.
Transfers outside the EU
Some providers are based in the USA or may process data there, and the operator of Anysetter is also based in the USA. Such transfers rely on an adequacy decision of the European Commission, in particular the EU-US Data Privacy Framework, or on standard contractual clauses (Art. 45 and 46 GDPR). This includes Google LLC for Google Analytics, which is certified under the EU-US Data Privacy Framework.
Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). Where we rely on legitimate interests, you can object to the processing (Art. 21 GDPR). You can also lodge a complaint with a data protection supervisory authority. Where we rely on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR); for Google Analytics, under Cookie settings at the bottom of every page. To exercise your rights, write to [email protected].