Privacy notice

Last updated: 13 October 2026

This notice explains which personal data the AI Decision Matrix tool on ai-decision-matrix.com processes, why, and for how long. You can use the tool without an account. We do not use cookies for tracking or advertising, and we do not run analytics on this site.

1. Controller

Launch Labs GmbH
Berl 14, Gut Berl, 48324 Sendenhorst, Germany
Represented by Tobias Zimmermann, Managing Director
Privacy contact: [email protected]

2. Hosting and access to the site

The site runs on a server in Germany operated for us by a hosting provider. When you open the site, your browser sends technical data such as your IP address, date and time, the page requested and your browser type. We need this data to deliver the site and keep it secure (Art. 6(1)(f) GDPR).

To prevent abuse and keep costs under control, the server counts requests per IP address. These counters are held only in the server's memory and are discarded after one hour at the latest. We also store the number of AI requests per day, without any reference to a person.

3. Bot protection (Cloudflare Turnstile)

Before the tool sends a request to our server, an invisible check by Cloudflare Turnstile confirms that the request comes from a human and not a bot. For this, Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA processes technical data from your browser and device, including your IP address. Turnstile does not use cookies for tracking. The legal basis is our legitimate interest in protecting the tool and its AI budget against automated misuse (Art. 6(1)(f) GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework. More: Cloudflare privacy policy and Turnstile Privacy Addendum.

4. Describing your decision in free text

If you describe your decision in your own words and click “Place my decision,” we send that text to our AI provider Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA. The AI suggests answers to the questionnaire and later summarises key facts for your report. We process this data to provide the function you requested (Art. 6(1)(b) GDPR).

Anthropic processes the text on our behalf. According to Anthropic, inputs and outputs of its API are deleted within 30 days. Data is transferred to the USA on the basis of the EU-U.S. Data Privacy Framework or the EU standard contractual clauses.

Please do not enter personal data such as names, customer data or confidential company details. A short, general description of the decision is enough.

Cache: To avoid paying twice for identical requests, our server stores the AI’s result for a description (the suggested answers, short quotes from your text that support them, and the key facts). The cache key is a one-way hash of your text. Cached results are deleted after 30 days.

If you only use the questionnaire, nothing is sent to Anthropic.

5. Dictation

The “Dictate” button uses the speech recognition built into your browser. Depending on the browser, your voice is processed by the browser vendor: Google (Chrome), Microsoft (Edge) or Apple (Safari). We only receive the resulting text, never the audio. The browser asks for your permission before it uses the microphone. If you do not want this, type your description instead. The vendors’ privacy policies apply: Google, Microsoft, Apple.

6. Saving your result (only with your consent)

Your answers are only stored if you tick the box at the end of the tool. We then store: the name you gave your decision, your description (if any), your answers, which answers came from the description, the resulting quadrant and scores, and the date. We do not store your IP address or any contact details with it.

Each saved result gets a random link (the page address changes to it after saving). Anyone who has this link can open the result: the name of your decision and your answers, but never your description. We do not publish these links. If you follow the “Powered by Launch Labs” link after saving, the ID of your result is passed to launch-labs.ai. If you then book a call there and include the link to your result, Launch Labs can see your result in preparation for the call; in that case it is no longer anonymous towards Launch Labs.

We use this data to improve the research tool and the questionnaire (Art. 6(1)(a) GDPR). It may be evaluated in anonymised or aggregated form together with the authors of the research briefing. We delete it after 24 months at the latest.

You can withdraw your consent at any time with effect for the future. Because we store no contact details, please send us the link to your result, or the name of your decision and roughly when you saved it, so that we can find and delete the entry.

7. Fonts and external content

All fonts and scripts of this site are served from our own server, except the Cloudflare Turnstile script (section 3). Links to other websites, such as MIT CISR, only lead there when you click them.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, write to the privacy contact above.

You also have the right to lodge a complaint with a supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, ldi.nrw.de.

Back to the tool · Legal notice