Last updated: 14 October 2026
This notice explains which personal data the AI Decision Matrix tool on ai-decision-matrix.com processes, why, and for how long. You can use the tool without an account. We do not use cookies for tracking or advertising, and we do not run analytics on this site.
Launch Labs GmbH
Berl 14, Gut Berl, 48324 Sendenhorst, Germany
Represented by Tobias Zimmermann, Managing Director
Privacy contact: tobias.zimmermann@launch-labs.ai
The site and its database are hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Workers and Cloudflare D1). The database with your email address and saved results is stored only in data centres in the European Union. Requests are handled at the Cloudflare data centre nearest to you, which may be outside the EU; Cloudflare is certified under the EU-U.S. Data Privacy Framework. When you open the site, your browser sends technical data such as your IP address, date and time, the page requested and your browser type. We need this data to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Technical logs of our application (error messages, no request data) are kept for 3 days.
To prevent abuse and keep costs under control, the server counts requests per IP address. It stores only a shortened one-way hash of the IP address, not the address itself, and deletes these counters after 70 minutes at the latest. We also store the number of AI requests per day, without any reference to a person.
Before the tool sends a request to our server, an invisible check by Cloudflare Turnstile confirms that the request comes from a human and not a bot. For this, Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA processes technical data from your browser and device, including your IP address. Turnstile does not use cookies for tracking. The legal basis is our legitimate interest in protecting the tool and its AI budget against automated misuse (Art. 6(1)(f) GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework. More: Cloudflare privacy policy and Turnstile Privacy Addendum.
If you describe your decision in your own words and click “Place my decision,” we send that text to our AI provider Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA. The AI suggests answers to the questionnaire and later summarises key facts for your report. We process this data to provide the function you requested (Art. 6(1)(b) GDPR).
Anthropic processes the text on our behalf. According to Anthropic, inputs and outputs of its API are deleted within 30 days. Data is transferred to the USA on the basis of the EU-U.S. Data Privacy Framework or the EU standard contractual clauses.
Please do not enter personal data such as names, customer data or confidential company details. A short, general description of the decision is enough.
Cache: To avoid paying twice for identical requests, our server stores the AI’s result for a description (the suggested answers, short quotes from your text that support them, and the key facts). The cache key is a one-way hash of your text. Cached results are deleted after 30 days.
The “Dictate” button uses the speech recognition built into your browser. Depending on the browser, your voice is processed by the browser vendor: Google (Chrome), Microsoft (Edge) or Apple (Safari). We only receive the resulting text, never the audio. The browser asks for your permission before it uses the microphone. If you do not want this, type your description instead. The vendors’ privacy policies apply: Google, Microsoft, Apple.
Before the tool places your decision or creates your report, it asks for your email address. When you finish the report, we store it together with your result: the name you gave your decision, your description (if any), your answers, which answers came from the description, the resulting quadrant and scores, and the date. We do not store your IP address with it.
To catch typos and throwaway addresses, our server checks that the address is correctly formatted, that its domain can receive email (a DNS lookup of the domain, not of your address) and that the domain is not a known disposable-email service. We do not send you an email for this.
We use your email address and your result to provide the tool and your saved result, and to understand who uses the tool (Art. 6(1)(b) and (f) GDPR). Results may be evaluated in anonymised or aggregated form together with the authors of the research briefing to improve the tool and the questionnaire.
Contact by the researchers (optional): only if you tick “The researchers may contact me by email…”, the researchers Jan vom Brocke and Thomas Haskamp, both part of Launch Labs, email you about your result (Art. 6(1)(a) GDPR). We store when you made or changed this choice. You can withdraw it at any time with effect for the future by writing to the privacy contact above.
Each saved result gets a random link (the page address changes to it after saving). Anyone who has this link can open the result: the name of your decision and your answers, but never your description or your email address. We do not publish these links. If you follow the “Powered by Launch Labs” link after saving, the ID of your result is passed to launch-labs.ai.
We delete your email address and results after 24 months at the latest. To have them deleted earlier, write to the privacy contact above from the address you entered.
All fonts and scripts of this site are served from our own server, except the Cloudflare Turnstile script (section 3). Links to other websites, such as MIT CISR, only lead there when you click them.
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, write to the privacy contact above.
You also have the right to lodge a complaint with a supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, ldi.nrw.de.