AIPM Hub

AIPM Hub Privacy Policy

Last updated: 2 November 2026

1. Who we are

AIPM Hub is operated by Product Masterclass GmbH, Pariser Str. 14, 81669 München, Germany ("we"). We are the controller for the personal data described here. Contact: [email protected]. This policy covers AIPM Hub only. Our general privacy policy for product-masterclass.com is at /legal/privacy-policy. The terms for using the hub are in the AIPM Hub Terms of Service.

2. What data we process

  • Account data: name, email address and profile picture from your Google sign-in; your role and team in the hub.
  • Content you create: tasks, notes, chats with your assistant, files in your workspace, and the memories your assistant keeps about how you work.
  • Data from services you connect: only from the services you switch on (see section 3 for Google). For other services, such as Jira or Slack, the data you ask the assistant to read or change.
  • Your Claude access token, which you add yourself so that your assistant runs on your own Claude account.
  • Technical data: log entries about sign-ins, errors and actions you confirmed, used to run and secure the service.

3. Google user data

If you connect your Google account, the hub requests access only to the services you switch on:

  • Google Calendar: to show your schedule, prepare meeting briefings, and create, change or answer events at your request.
  • Gmail: to list and read messages for triage and reply drafts, create drafts, send a draft after you confirm it, and archive or label messages.
  • Google Drive: to find and read documents you ask for, such as meeting transcripts. The hub does not write to Drive and does not share files.
  • Google Sheets and Forms: to read spreadsheets and form responses you name, and to write rows after you confirm.

We use Google user data only to provide and improve the features you use in the hub. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train generalized AI or machine learning models. We do not transfer it to others except as needed to provide the features you request (see section 5), for security, to comply with the law, or as part of a merger or acquisition with prior notice to you. Nobody at Product Masterclass reads your Google data unless you ask us to for a support request, it is necessary for security or abuse investigation, or the law requires it.

AIPM Hub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • To provide the hub to you (Art. 6(1)(b) GDPR, contract).
  • To connect the services you choose (Art. 6(1)(a) GDPR, consent; you can withdraw it at any time by switching the service off).
  • To keep the service secure and fix errors (Art. 6(1)(f) GDPR, legitimate interest).

5. Who receives data

  • Anthropic, PBC (USA): when you ask your assistant something, the content needed for that request is sent to Claude under your own Claude account. Anthropic processes it under the terms you agreed with Anthropic; your Claude privacy settings decide whether it may be used to improve their models. Transfers to the USA rely on Anthropic's EU-U.S. Data Privacy Framework certification and standard contractual clauses.
  • Google: when you connect Google services, the hub reads and writes data in your Google account on your behalf.
  • Services you connect yourself (for example Jira, Slack, WhatsApp): the hub sends them what you ask it to send.
  • Hosting: the hub runs on servers in Germany operated by us or by our hosting provider under a data processing agreement.

We do not sell personal data and do not share it for advertising.

6. Storage and security

Data is stored in Germany. Access tokens for Google and other services, and your Claude token, are stored encrypted. Each user's workspace is separated from other users; access is checked on every request. Only two people at Product Masterclass have administrative access to the servers.

7. How long we keep data

  • When you disconnect a service, we delete its stored tokens and the data taken from it within 30 days, except where you copied it into your own notes or tasks.
  • When you close your account, we delete your account and content within 30 days.
  • Technical logs are deleted after 90 days.

You can revoke Google access at any time in the hub's settings or at myaccount.google.com/permissions.

8. Your rights

You have the right to access, correct, delete and port your data, to restrict or object to processing, and to withdraw consent (Art. 15 to 21 GDPR). Write to [email protected]. You can also complain to a supervisory authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach.

9. Children

The hub is a tool for professionals and is not intended for anyone under 16.

10. Changes

We will announce material changes in the hub before they take effect. The date at the top shows the latest version.

4.9