Controller
Leadtime Labs GmbH, Yorckstraße 22, 93049 Regensburg, Germany, represented by the managing director Lukas Ebner. Email: hello@leadtime.de.
Data protection officer
We have appointed an external data protection officer: Mr W. Dragon, Projekt 29 GmbH & Co. KG, Ostengasse 14, 93047 Regensburg, Germany, phone +49 941 298693-0, email: w.dragon@projekt29.de, www.projekt29.de.
Hosting and server logs
This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its Nuremberg data centre. Whenever a page is requested, the server processes technically necessary data: IP address, date and time, requested address, amount of data transferred, browser and operating system, and the previously visited page. This serves the secure and stable operation of the website (Art. 6 (1) (f) GDPR). The logs are deleted after [add period, typically 7 to 30 days].
Contact form and email
When you write to us via the form or by email, we process your name, your email address, your company if given, the topic you chose and your message. Your message goes by email to our team, who handle it in our Leadtime application. We run Leadtime at DigitalOcean, LLC (New York, USA) in the Frankfurt am Main data centre (region FRA1). If you write by email, the message is handled by [add email provider].
We need your name, email address and message to reply. Everything else is optional. We don’t use automated decision-making.
The legal basis is Art. 6 (1) (b) GDPR if your request concerns or prepares a contract, otherwise our legitimate interest in answering requests (Art. 6 (1) (f) GDPR). We delete the data once the request has been dealt with, unless statutory retention periods apply. If your request leads to talks about a contract, we keep your contact details in our CRM in Leadtime until [add period, e.g. two years after the last contact].
YouTube on the tutorials page
On the tutorials page you can watch videos from our YouTube channel. Nothing is loaded from YouTube when the page loads; we serve the preview images ourselves. Only when you open a video and click “Play” in the notice does your browser load the player from youtube-nocookie.com. Data such as your IP address is then transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google may also process it in the USA. Google is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision [to be confirmed by the data protection officer]. Once the video starts, YouTube may use cookies or similar technologies in your browser.
The legal basis is your consent (Art. 6 (1) (a) GDPR). Your browser remembers your choice for further videos. You can withdraw it at any time using the button under “Cookies and browser storage”. More information: policies.google.com/privacy.
Videos, fonts, icons
We serve the videos on the area pages, the fonts, the icons and all scripts from our own server. No data is transferred to third parties in the process.
Web analytics without cookies
Draft, to be reviewed by a lawyer. To see which pages are read and where visitors come from, we use Umami, open-source software for audience measurement. Umami runs on our own server at Hetzner Online GmbH in its Nuremberg data centre (see “Hosting and server logs”). No data is passed on to third parties.
Umami sets no cookies and stores nothing in your browser. It records the page requested, the previous page, browser, operating system, device type, screen size and language, the country, region and city derived from the IP address, and a few actions: a click on “Start free trial” or “Book a call”, sending the contact form, starting a video, opening the Leadtime assistant and using the calculator. The IP address itself is not stored. To group the page views of one visit, Umami builds an identifier from the IP address, browser details and a regularly changing random value; the IP address cannot be derived from it. If your browser sends “Do Not Track”, Umami records nothing.
The legal basis is our legitimate interest in improving the website and measuring its reach (Art. 6 (1) (f) GDPR). We delete the data after 14 months.
Cookies and browser storage
This website sets no cookies and uses no advertising services. For a few settings it stores values in your browser’s local storage. They never leave your device:
- lt-tut-seen: which tutorials you have marked as watched.
- lt-tut-yt: whether you agreed to loading YouTube.
This storage is necessary for the functions you request (Section 25 (2) no. 2 TDDDG). You can delete the values here; this also withdraws your consent to YouTube.
Leadtime assistant (AI chat)
Draft, to be legally reviewed. At the bottom right of every page and on the overview you can ask an AI assistant questions about Leadtime. The chat only starts when you open it and send a question. Your question and the conversation so far then go via our server to the gateway OpenRouter Inc. (USA) and from there to a language model by Mistral AI (France). With every request we require that the data is not stored there and not used for training. We keep no transcript ourselves; our server only counts requests and usage for abuse protection, keeping the IP address only as a hash with a daily changing key and only in memory.
The legal basis is our legitimate interest in answering your questions (Art. 6(1)(f) GDPR), and for questions before a contract Art. 6(1)(b) GDPR. Please don't enter passwords or third-party data. For the transfer to the USA: [add the provider's safeguards, e.g. EU-US Data Privacy Framework or standard contractual clauses].
If you choose “Talk to a person”, your name and email address (if given), your request and the conversation so far go to our team in Slack (Slack Technologies, [add contracting party and safeguards]). Replies from our team appear in the chat while the page is open, otherwise by email. We keep these handovers for up to seven days so we can reply; then they are deleted. In the browser the chat remembers the current conversation for this tab (sessionStorage lt-chat, lt-chat-sid) and after a handover the session for 24 hours (lt-chat-handover), plus lt-chat-seen.
The Leadtime application
This policy applies to the website. If you use Leadtime as a customer, we process data on your behalf. This is governed by the data processing agreement (DPA), which you can find under Legal. For your contract, billing and login data we are the controller ourselves; [own section or the application’s privacy notice] applies. The application (leadtime.app) and the help centre (docs.leadtime.app) have their own privacy notices.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can withdraw consent at any time with effect for the future. Write to us at the address above.
Right to object: where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation.
You can lodge a complaint with a supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Last updated
Draft of 8 November 2026. We will update this policy if the website or the legal situation changes.

ClientsOpportunities, quotes, product catalogue
ProjectsPlanning, tasks, sign-off
ServiceHelpdesk, tickets, retainers, assets
TeamPeople, absence, time
MoneyInvoices, e-invoicing, insights
AgentsLeadtime Agent, your own agents, automation