Privacy

Last updated: 30 July 2026

1. Controller

APO SOLUTIONS FlexKapG
Auhofstraße 2
3184 Türnitz
Austria
Company register number: FN 656247 w
Email: info@clawilab.com

2. Purpose of the beta

The service compares four paperback PDF files supplied by the user: the currently accepted interior and cover, and a planned revised interior and cover. It creates a technical risk report before the user independently uploads files to KDP. The beta has no user accounts, email capture, advertising, third-party analytics or payment processing.

3. Uploaded PDFs

PDF bytes are processed only to perform the requested comparison. The application does not copy source PDFs into persistent application storage. For larger uploads, the web framework can use request-bound temporary files in volatile container storage; each upload is closed after reading and volatile storage is removed on container restart. Users should remove unnecessary personal data and upload only files they are entitled to process.

4. Report metadata and retention

The service stores the user-supplied revision label, base file names, SHA-256 fingerprints, PDF dimensions and counts, technical findings, score, verdict and timestamps. Report access ends after 1 day. Expired rows are removed on startup, at least hourly while the service runs, whenever a new report is stored and when an expired report is requested. This means scheduled physical deletion can follow the access deadline by up to approximately one cleanup interval. The unpredictable report URL acts as an access link and should not be shared publicly. A button on the result page deletes the stored report immediately. Aggregate event rows used to measure beta usage are pruned after 90 days.

5. Privacy-preserving usage measurement

The service records aggregate event types and timestamps for landing-page views, completed checks and report deletions. If a link contains campaign labels (utm_source or utm_campaign), the cleaned labels are carried through the upload form and stored with the landing and completed-check events. A completed-check event also contains its random report identifier, score and verdict. The application does not store IP addresses, browser fingerprints, cookies or uploaded content in these event records. Events are retained for up to 90 days to evaluate whether the beta is used and operates reliably.

6. Hosting and connection data

The service runs on a server in Frankfurt am Main, Germany, provided by 1blu GmbH. Technically necessary connection data, including IP address, request time, requested resource, browser information and status code, is processed transiently to transmit and secure the website. Caddy and Uvicorn access logs are disabled for this service. Container and system logs may contain startup, shutdown and technical error messages, but the application does not intentionally log request bodies or PDF contents.

7. Legal bases

Processing required to deliver the expressly requested PDF comparison is based on Art. 6(1)(b) GDPR. Security, stability, abuse prevention and privacy-preserving beta measurement are based on Art. 6(1)(f) GDPR. Users may object to processing based on legitimate interests where the legal requirements are met.

8. Recipients and transfers

The German hosting provider may process connection or system data as part of infrastructure operation. No source PDF is intentionally transferred to analytics, advertising or payment providers. If a user contacts the published email address, the participating mail providers process the communication separately. The beta itself does not use Stripe.

9. Rights

Subject to applicable requirements, data subjects may have rights of access, rectification, deletion, restriction, portability and objection. Requests can be sent to info@clawilab.com. A complaint may also be filed with the Austrian Data Protection Authority at dsb.gv.at.

10. No automated decision

The score is a deterministic technical preflight result. It is not profiling or an automated decision producing legal or similarly significant effects. It does not decide whether Amazon will accept a file.

This notice describes the deployed beta configuration. It is a researched operational draft and not a guarantee of legal compliance.