Privacy Policy
1. Data Controller
See Imprint.
Go to Imprint →2. Data Collected
We collect the following data:
• Website statistics (Vercel Analytics): aggregated, anonymous data (page views, coarse region, browser/OS/device type), cookieless and without storing the IP address
• Search queries (API & website): search term, city, category, country, result count, requested limit, user agent and a coarse client classification (e.g. browser, CLI, AI agent). NO IP address is stored.
• API interactions: click type (phone, email, website, navigation, detail view) for quality improvement and relevance calculation. The IP address is only used transiently in memory for abuse/duplicate detection (rate limiting) and is not stored.
• Website redirect: Clicking website links in HTML cards routes through discava.ai to record the interaction. The redirect happens immediately via HTTP 302.
• Account: Email address, name (during registration)
• Claiming: Claimer's email address is stored on the business entry
• Business data: Business details of claimed entries
3. Purpose of Processing
Data processing serves to provide the service, ensure data quality of business listings, improve AI recommendations, and measure interaction quality (click tracking on contact data and redirects).
4. Legal Basis
Processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest).
5. Data Sources
Our business data comes from:
• OpenStreetMap (publicly available geodata, ODbL license)
• Overture Maps (CDLA Permissive 2.0)
• Foursquare Open Source Places (Apache 2.0)
• User input (claiming and self-registration)
• Publicly accessible business websites
6. Cookies
discava uses only technically necessary cookies for session management. Vercel Analytics is cookieless and does not require a cookie banner.
7. Hosting
This website is hosted by Vercel Inc., the database by Neon (EU region). Data processing takes place in Frankfurt/EU (Region fra1). For rate limiting (abuse protection) we use Upstash Redis; the IP address is only processed transiently and not stored permanently.
8. Analytics
We use Vercel Analytics and Vercel Speed Insights, cookieless analytics and performance-measurement services. Both collect only aggregated, anonymous data and do not store IP addresses.
9. Data Subject Rights
You have the right to:
• Access your stored data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Object to processing
Contact: gleipnircode@gmail.com