Privacy Policy
Last updated: September 14, 2026
Privacy Policy
I run IntentCable (IntentCable, "I", "me", "my"). This Privacy Policy explains what personal data I collect and process when you use the IntentCable website and application (the "Service"), why, and what your rights are under the EU General Data Protection Regulation (GDPR) and other applicable data-protection law. It also explains, separately, what happens with data about the people whose public posts the Service finds and stores on your behalf, who are not themselves IntentCable users.
1. Data Controller
IntentCable is operated by a sole proprietorship (Einzelunternehmen) registered in Germany.
Controller: Bengin Cetindere
Address: Cecilienstr. 26, 53721 Siegburg, Germany
Contact Us
2. Scope
This Policy applies to anyone who visits the IntentCable website or holds a IntentCable account. By using IntentCable, you acknowledge that you have read and understood this Policy. Section 9 covers a different group of people: the authors of the public posts the Service stores for its users.
3. Personal Data I Collect
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email address, password (stored hashed) | Create and secure your account (Art. 6(1)(b) GDPR) |
| Business inputs | Your site's URL, your own X/LinkedIn handle, the answers you give when the Service reads your business, your notes on how you write, and reply examples you save | Work out who your buyers are and draft replies that sound like you (Art. 6(1)(b)) |
| Leads and drafted replies | The posts the Service finds for you and the reply it drafts for each one (see also Section 9) | Deliver the core Service (Art. 6(1)(b)) |
| Payment data | Billing name, billing address, business tax ID if you enter one, invoice number, amount, currency; card details are handled by Stripe and never reach my systems | Process your subscription, prevent fraud (Art. 6(1)(b) & (f)) |
| Usage data | IP address, device and browser type, pages visited, actions taken in the app | Keep the Service secure, understand how it is used, fix bugs (Art. 6(1)(f)) |
| Cookies & analytics | Session cookie, PostHog analytics cookies | Keep you signed in; measure engagement with your consent (Art. 6(1)(a) or (f)) |
4. How I Use Your Data
- Provide the Service: read your site, find leads on X (and LinkedIn once you are paying), and draft replies.
- Process payments: take payment for your subscription through Stripe, issue your invoice, and keep your access in sync with the subscription.
- Improve & secure: monitor performance, detect abuse or fraud, build new features.
- Communicate: send account, billing and lead-alert emails, and reply if you contact me.
- Comply with law: meet tax and accounting obligations, resolve disputes, enforce the Terms of Service.
I do not sell or rent personal data.
5. Legal Bases (Art. 6 GDPR)
- Contractual necessity: processing needed to run your account and deliver the Service you signed up for.
- Legitimate interests: to secure, run and improve the Service, and to find and store the third-party posts described in Section 9 (balanced against the interests of the people those posts belong to).
- Consent: for optional analytics cookies. You may withdraw consent at any time via the cookie banner.
- Legal obligation: for tax, accounting or regulatory requirements.
6. Automated Processing & AI
IntentCable uses large language models, reached through OpenRouter and through Z.ai (the GLM models), to read your site, judge which public posts are worth answering and draft replies to them. Prompts and completions pass through Langfuse for tracing, so I can debug and improve the prompts. This processing decides which posts are shown to you and drafts text for you to edit and post yourself; it does not decide anything about you and produces no legal or similarly significant effect on you within the meaning of Art. 22 GDPR. Nothing is posted anywhere without you choosing to post it.
7. Data Retention
- Public posts, thread context and calibration samples: every post, its parent posts and the samples used to check the Service's own judgement are deleted 30 days after they were stored, unless you replied to that post or it is part of a conversation you are already in. See Section 9 for what this covers and why.
- Account data: retained until you delete your account (Preferences → Delete account) or as required by law.
- Payment records: I am the seller, so I issue your invoices and must keep them for as long as German commercial and tax law requires. That obligation outlives your account, so those records are kept even after you delete it. Stripe separately keeps its own record of the payments it processed. Inside the app itself I store only what the subscription status requires, for as long as your account exists.
- Analytics data: kept as long as I need them to understand how the product is used, and deleted on request.
8. Sharing & Disclosure
I use the following processors under GDPR-compliant agreements. None of them may use your data for their own purposes.
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, database (D1), key-value storage (KV), background jobs (Workflows), bot protection (Turnstile) |
| Resend | Sending account and lead-alert email |
| PostHog | Product analytics, self-hosted at curious.intentcable.com (not PostHog Cloud) |
| Stripe | Payment processing and subscription billing. I am the seller you contract with; Stripe takes the payment on my behalf, handles your card details, and hosts the checkout and billing pages you are sent to. I never see or store your card details |
| twitterapi.io | Searching X (Twitter) for public posts on your behalf |
| HarvestAPI | Searching LinkedIn for public posts on your behalf (paid plans) |
| OpenRouter, Z.ai (GLM) | Large language models that read your site, judge posts and draft replies |
| Langfuse | Tracing what is sent to and returned from the language models above, for debugging |
| Tawk.to | Live chat support, when you open the chat widget |
I may also disclose data if required by law, to protect rights and safety, or with your explicit consent.
9. Third-Party Data: Posts You Did Not Write
IntentCable's core function is finding public posts on X, and on LinkedIn for paying users, that look like a lead for your business, and drafting a reply to them. That means I store personal data about people who are not IntentCable users and who have no account or relationship with me: the post's text, its public engagement counts, and the author's public profile information (handle, display name, follower count, bio or headline), so the Service can judge and show you the post and you can decide whether to reply.
- What is stored: the post itself, the parent posts of its thread when relevant, the author's public profile fields above, and, for the calibration samples the Service uses to check its own judgement, the same.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The posts and profiles are already public, the processing is limited to what is needed to judge and show a lead to you, and it is proportionate to that purpose.
- Retention: 30 days from when a post was stored, unless you replied to it or it is part of a conversation you are already in with that person, in which case it is kept for as long as your account exists (see Section 7).
- Objection and rights: if you are the author of a post IntentCable stored and you object to that processing, or want to exercise any right under Section 10, contact bengin@intentcable.com, referencing the post's URL if you have it.
10. International Transfers
If personal data is transferred outside the European Economic Area (EEA), I rely on the European Commission's Standard Contractual Clauses or an adequacy decision to protect it.
11. Your Rights
Subject to limitations under GDPR, you have the right to:
- Access: obtain confirmation and a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion ("right to be forgotten"). You can delete your own account and its data yourself from Preferences at any time.
- Restriction: limit processing under certain conditions.
- Data portability: receive your data in a structured, machine-readable format. You can download a JSON export of your leads, drafts, business read and preferences from Preferences at any time.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: at any time, without affecting prior processing.
To exercise any right, contact me at bengin@intentcable.com.
12. Security Measures
I use industry-standard technical and organizational measures, including TLS encryption, hashed passwords, access controls and Cloudflare's platform protections, to protect data from unauthorized access, alteration or disclosure.
13. Cookies & Tracking Technologies
I use:
- Essential cookies: the signed session cookie that keeps you logged in, and cookies Cloudflare Turnstile sets to check you are not a bot on the signup and login forms. Required for the Service to work, cannot be disabled.
- Analytics cookies (PostHog): only set with your prior consent, on my own self-hosted PostHog instance.
- Live chat (Tawk.to): sets a cookie only if you open the chat widget.
You can manage cookie preferences via the cookie banner. Clear your site data to see it again.
14. Changes to This Policy
I may update this Privacy Policy from time to time. The latest version is always posted here with the "Last updated" date. I will announce material changes by email or in-app notice where possible.
For additional terms governing your use of IntentCable, see the Terms of Service.