I4U.BUSINESS / UPDATED: 12 OCTOBER 2026

Privacy notice

How this website, its landing pages and the newsletter handle your data.

1. Data controller

I4U LLC, 16192 Coastal Hwy, Lewes, DE 19958, USA.
Contact: email info@i4u.business, contact form.

2. Website delivery and hosting

This website is hosted on a DigitalOcean server. When you visit, technically necessary connection data is processed. Server logs include the IP address, time, requested URL, HTTP status, amount of data transferred, browser identifier, and, where available, the referring page.

This processing supports website delivery, troubleshooting, and server security. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is secure operation. Website logs are rotated daily, with up to 14 rotated log files retained. Retention can be longer during periods without traffic. For information about the hosting provider, see DigitalOcean’s privacy policy.

3. Cookies, consent, and downloads

The main pages of this website set no cookies and embed no external fonts or social media widgets. Fonts are served from our own server.

All pages of this website may use marketing services (see section 8) and, in future, audience measurement services with your consent; you decide separately for the categories “Statistics” and “Marketing”. They load only after you agree in the consent banner (Section 25(1) TDDDG, Article 6(1)(a) GDPR). Your choice is stored in your browser’s local storage for up to 12 months, which is technically necessary to respect your decision. You can change or withdraw consent at any time via “Cookie-Einstellungen” in the page footer.

PDF and text files on the main pages are served directly from the website server and require neither registration nor an email address.

4. Contact enquiries

When you use the contact form, we process your name, email address, and message to respond to your enquiry. Your message is sent to our inbox as an internal email notification: primarily via Google (Google Apps Script and Gmail in the operator's Google account; Google Ireland Limited or Google LLC), with the form service FormSubmit (Devro LABS) as a fallback. Your name, email address, and message are shared with Google or FormSubmit and may be processed outside the EU; for transfers to the US, Google relies on the EU-U.S. Data Privacy Framework or standard contractual clauses. FormSubmit states that it retains submissions for 30 days; with Google, the notification remains in our mailbox until we delete it. We also store enquiries sent via the contact form on our server (DigitalOcean, Frankfurt) so that none get lost if email forwarding fails; they are deleted automatically after 90 days. For details, see FormSubmit’s privacy policy and its retention documentation.

Spam protection uses a hidden field, a time-limited form token, and server-side sending limits. For these limits, a non-reversible hash of the IP address, generated using a secret key, is stored for at most two hours. This uses no cookies or external CAPTCHA services. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries, or otherwise Article 6(1)(f) GDPR based on our interest in responding. Data is retained only as long as needed to handle the enquiry or meet legal retention requirements. The operator is based in the USA; messages addressed to it may be handled there.

AI news and AI tool submissions: Using the forms at /news/einreichen/, /en/news/submit/, /tools/einreichen/ and /en/tools/submit/, you can send us tips about AI news or AI tools. We process your name, email address, optionally your company/role, and the details of the story or tool (e.g. headline, links, description, details of a partner programme) to review the submission and to contact you with questions if needed. As with the contact form, the submission is sent to our inbox through FormSubmit (Devro LABS), with the same information on processing outside the EU, retention and spam protection. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give in the form and can withdraw at any time with effect for the future by emailing info@i4u.business. We do not use these details for newsletters or advertising and do not share them. We may publish information about a story or tool in our own words; your personal data is not published. Submissions we do not pursue are deleted after 12 months at the latest.

When you sign up for our newsletter “AI Briefing” (German edition: “KI-Briefing”), you receive emails, usually on Wednesdays and Fridays, with AI news, tips on AI tools and current deals. It also presents paid digital products, partly with affiliate links for which we earn a commission (see section 7).

We process your email address (required), first name (optional), the source of the sign-up (e.g. campaign identifier or referring website), and the time and IP address of sign-up and confirmation. Sign-up uses double opt-in: you confirm via a link in an email before anything else is sent, and we log sign-up and confirmation as proof of consent. Emails contain tracking pixels and link redirects so we can see whether an email was opened and which links were clicked, to improve the content; this is part of your consent.

The legal basis is your consent, Article 6(1)(a) GDPR (and Section 25(1) TDDDG). You can withdraw it at any time using the unsubscribe link in every email or by contacting us. Emails are sent via MailerLite, Inc., 548 Market St, PMB 98174, San Francisco, CA 94104-5401, USA, as our processor under a data processing agreement (Article 28 GDPR). According to MailerLite, data is stored in data centres in the European Union. MailerLite, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to the USA rely on the European Commission’s adequacy decision for it (Article 45 GDPR), and where the data processing agreement includes the Commission’s standard contractual clauses, they apply in addition (Article 46(2)(c) GDPR). See MailerLite’s privacy policy.

Data is kept until you unsubscribe. After unsubscribing, we keep your email address on a suppression list for up to three years to prevent further mailings and to be able to prove prior consent (Article 6(1)(f) GDPR). Unconfirmed sign-ups are deleted regularly.

6. AI Visibility Check

Applies to the AI Visibility Check at i4u.business/en/business/ai-visibility-check/ and /en/business/ai-visibility-check/.

Short result: When you enter a website address (optionally keywords and a competitor address), our server fetches publicly available pages of that website and analyses them. For this we query public data sources: Wikidata/Wikipedia (Wikimedia Foundation, USA), the Tranco list and Google PageSpeed Insights (Google Ireland Ltd.). Only the website address is sent, no personal data. We cache the result for 30 minutes. We process your IP address only in hashed form to limit abuse (number of checks per hour or day) and delete these counters after 24 hours at the latest. Legal basis: Art. 6(1)(b) GDPR (providing the requested tool) and (f) (preventing abuse).

Protection against automated requests (Cloudflare Turnstile): To keep bots from abusing the check, we use Cloudflare Turnstile (Cloudflare, Inc., USA) when you start a check and on the form for the full report. Turnstile checks in the background, based on technical characteristics of your browser and your IP address, whether a human is using the page; usually no click is needed. Turnstile does not set advertising cookies. Our server sends the check result together with your IP address to Cloudflare for verification. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR (protecting the service against abuse). More information: Turnstile privacy notice.

Full report: For the full report you enter your name and email address, optionally your company, phone number and a call request. We store these details together with the check result on our web server at DigitalOcean (see section 2) to provide the report and to contact you if you request a call. We are notified of new reports by email; this internal notification is sent via Google (Apps Script/Gmail), or FormSubmit (Devro LABS) as a fallback, as described for the contact form (see section 4). Legal basis: Art. 6(1)(b) GDPR and your consent (a). We delete reports and lead data after 12 months or earlier at your request.

AI mention test: In the full report we ask the AI services ChatGPT (OpenAI, L.L.C., USA / OpenAI Ireland Ltd.) and Claude (Anthropic PBC, USA / Anthropic Ireland Ltd.) via their APIs whether they know your company and which providers they recommend for your keyword. For some of the questions the services run a web search. To understand your offering we also send the publicly visible text of your homepage (title, heading, description, page text) to OpenAI; it contains no personal data from the form. Only the company or brand name from your website, the domain, your first keyword (or otherwise your homepage’s main heading) and, if available, a location from your website are sent, not your name, email address or phone number. According to the providers, data sent via the API is not used to train their models. Legal basis: Art. 6(1)(b) GDPR.

Tip emails (MailerLite): If you agree, we add you to the “KI-Check” group of our email service MailerLite (for the contracting party, data storage and the Data Privacy Framework see section 5). You first receive an email asking you to confirm. Only then do we send you up to three emails with tips on your result. We pass on your email address, name, company, phone (if given), domain, score, top lever, the link to your report and whether you requested a call. Legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or by contacting us.

AI duel “Wen empfiehlt die KI?” (Who does AI recommend?)

Applies to the tool at i4u.business/unternehmen/wen-empfiehlt-die-ki/ (German).

Test: When you enter a website address, our server fetches the public homepage of that website. We send its publicly visible text (title, headings, description, page text) to Claude (Anthropic PBC, USA / Anthropic Ireland Ltd.) to derive the offering, location and six typical customer questions. We ask these questions, plus what the AI knows about the domain, to ChatGPT (OpenAI, L.L.C., USA / OpenAI Ireland Ltd.) and Claude via their APIs, without web search. Only website content and the domain are sent, no personal data. According to the providers, data sent via the API is not used to train their models. We store the result on our web server at DigitalOcean (see section 2) so you can share it by link, and delete it after 90 days. We process your IP address only in hashed form to limit abuse and delete these counters after 24 hours at the latest. To protect against bots, the page loads Cloudflare Turnstile when it opens; the check runs when you start a test and when you submit an email address (see section 6 for details). Legal basis: Art. 6(1)(b) GDPR (providing the requested tool) and (f) (preventing abuse).

Free re-check in 30 days (optional): If you enter your email address, we add you to the “KI-Duell” group of our email service. The processor is MailerLite, Inc. (USA), under a data processing agreement (Article 28 GDPR). Transfers to the USA rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Article 45 GDPR); MailerLite, Inc. is listed there as an active participant. Where the data processing agreement includes the Commission’s standard contractual clauses, they apply in addition (Article 46(2)(c) GDPR). See section 5 for details. You first receive an email asking you to confirm; only then do we send you your ranking, tips and recommendations on AI visibility and suitable tools and services, and after 30 days the result of a new test of the same website. For the re-test we run the test again as described above. We pass on your email address, the tested domain, the result ID, your place, the most-named company, the question with the biggest gap and the re-test date. MailerLite measures whether and when you open emails and click links. Signing up is not required to see the result. Legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or by contacting us.

7. Affiliate links and product recommendations

Some links on our pages and in our emails are affiliate links, in particular to the Digistore24 marketplace (Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany). We label them as advertising. If you buy through such a link, we earn a commission at no extra cost to you. A partner or campaign identifier is passed in the link so the sale can be attributed; we transmit no other personal data. The provider’s own privacy terms apply on its pages, where cookies may be set to attribute commissions.

8. Meta Pixel and Meta Conversions API (only with consent)

Only for visitors from our ads: the consent banner appears only if you arrive via one of our ads on Facebook or Instagram (recognisable by the “fbclid” or “utm_source=meta” parameter in the address). So that we only show you suitable offers in that case, your browser remembers the origin “ad” for the duration of the session (sessionStorage, no identifier). All other visitors see no banner, and no data is sent to Meta. For visitors from ads, the following applies with consent:

If you agree to the “Marketing” category in the consent banner, our website uses the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, to measure whether visitors from our Facebook and Instagram ads view the page and sign up, and to show ads to relevant audiences. Data such as IP address, browser information, pages viewed, and events (e.g. “sign-up” or a click on a partner link, with the name of the partner program) is sent to Meta, which may link it to your Facebook or Instagram account and process it in the USA. Meta is certified under the EU-US Data Privacy Framework. We are jointly responsible with Meta for collection and transmission (Article 26 GDPR). The legal basis is your consent (Article 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via “Cookie-Einstellungen”. Without consent, the pixel is not loaded. See Meta’s privacy policy.

Server-side transmission (Conversions API): Only if you have consented, we additionally send the same events (e.g. page view, sign-up, click on a partner link) to Meta via our own server. This includes the event name, a random event ID, the page address, your IP address, your browser identifier (user agent) and, if present, the Meta identifiers from the “_fbp” and “_fbc” cookies. The event ID prevents an event from being counted twice. We do not send email addresses or names. Our server does not store this data; only error messages are briefly kept in the server log. Legal basis and withdrawal as above.

YouTube videos (only after a click)

Some articles embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Nothing connects to YouTube until you click “Load video”. After the click, your browser loads the video via youtube-nocookie.com, and data such as your IP address is sent to Google, which may also process it in the USA. The legal basis is your consent given by clicking (Article 6(1)(a) GDPR, Section 25(1) TDDDG). See Google’s privacy policy.

Appointment booking via Google Calendar

For the free marketing office hours we embed the Google Calendar booking page on the “pick your slot” page (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When this page loads, your IP address and technical browser data are sent to Google; Google may set cookies. When you book a slot, Google processes the data you enter (e.g. name and email address) and sends the invitation. Google is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(b) GDPR (carrying out the call you requested). You can also arrange a slot by email to info@i4u.business instead. More information: Google Privacy Policy.

9. External services

When you follow a link to Instagram, Upload-Post, Digistore24, or another external service, you leave this website. The respective provider’s privacy terms then apply. This website does not connect to those services unless you click a link.

10. Your rights

Under the conditions set out in the GDPR, you have rights to access, rectification, erasure, restriction, and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation, and you may object to processing for direct marketing at any time without giving reasons. Where processing relies on consent, you may withdraw it at any time for the future. You may lodge a complaint with a data protection supervisory authority. Please send questions or requests using the contact details above.

Legal basis and details: General Data Protection Regulation.