Privacy Policy
Privacy at a glance
Architect High Level respects your privacy and aims to collect only the information needed to operate the website and Early Access program. We do not currently use analytics, advertising pixels or behavioural tracking, and we do not collect GPS or browser-geolocation data for Early Access.
This Privacy Policy explains what information is processed when you visit architecthighlevel.com, register for Early Access or optionally consent to marketing communications.
Early Access
When you register for Architect High Level Early Access, we process your first name, email address and registration timestamp. We also record whether you separately chose to consent to marketing communications. An internal source label may be stored to identify the registration as originating from Architect High Level Early Access.
We use these details to maintain the Early Access list, administer registrations and notify you when access becomes available. The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is carried out at your request in preparation for potential access to the service.
Early Access registration does not require marketing consent. If you do not consent to marketing, we will use your Early Access details only for communications necessary to administer Early Access, in particular to notify you when access becomes available.
How Early Access data is processed
Early Access submissions are transmitted from the website to a Cloudflare Worker and then to Google Apps Script. New registrations are stored in a Google Sheet within our Google Workspace environment. An internal administrative notification containing registration details is generated through Google mail services and sent to authorised internal recipients.
We do not request or use GPS location, browser geolocation or approximate city/region/country information as part of the Early Access registration process. The technical service providers involved in transmitting and operating the request may process technical connection information, such as IP addresses and request metadata, as necessary to provide and secure their services.
Optional marketing communications
Marketing consent is separate from Early Access registration and is optional. The marketing checkbox is not preselected, and you can register for Early Access without giving marketing consent.
If you actively consent, we may use your email address to send Architect High Level news, product information or similar marketing communications. The legal basis is your consent under Article 6(1)(a) GDPR and the applicable Austrian rules for electronic marketing communications, including the TKG 2021 requirements. You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Retention
Early Access registration data is kept for the duration of the Early Access program and, after the program has ended or access has been provided, for no longer than six months unless a later customer relationship, a separate valid marketing consent, a legal obligation or another lawful basis requires or permits further retention.
Where marketing consent has been given, the relevant contact and consent status may be processed until the consent is withdrawn. Evidence needed to demonstrate the existence or withdrawal of consent may be retained for as long as reasonably necessary to comply with legal obligations or establish, exercise or defend legal claims.
Technical server and security logs are retained only for as long as necessary for operation, security, troubleshooting and abuse prevention, taking account of the retention settings and policies of the relevant infrastructure provider.
Website access and technical data
When you visit the website, technical information may be processed automatically in order to deliver and protect the site. Depending on the request and infrastructure, this may include IP address, date and time of access, requested page or resource, browser and device information, network/request metadata and security logs.
The purpose is to provide a stable and secure website, diagnose technical problems and prevent misuse. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interests in secure, reliable and efficient operation of the website and its technical infrastructure.
Cookies and similar technologies
Architect High Level currently uses only technology that is technically necessary for the stable delivery of the website. Our current cookie and browser-storage audit identified one cookie on architecthighlevel.com: “__vdpl”. This is a session cookie used by the underlying Vercel delivery infrastructure for deployment pinning / stable delivery during a session. It is configured as HttpOnly, Secure and SameSite=Strict.
No AHL data was found in Local Storage, Session Storage, IndexedDB or Cache Storage during the current audit, and no Architect High Level service worker was registered. We currently do not use analytics cookies, advertising cookies, remarketing cookies or similar behavioural tracking technologies.
Because the current cookie is strictly necessary for the requested website service, prior cookie consent is not required for the present configuration. Architect High Level therefore does not currently display a cookie-consent banner. Information about the technically necessary cookie is provided in this Privacy Policy and in the Cookie Policy.
If we introduce non-essential technologies in the future — for example analytics, advertising, remarketing, social-media tracking or similar tools — those technologies will not be activated for visitors where prior consent is legally required until the required consent has been obtained.
Service providers and technical infrastructure
We use external service providers to operate the website and Early Access infrastructure. Depending on the service, these providers may process personal data or technical connection data on our behalf or under their own applicable privacy terms.
- Grok Build / SpaceXAI — website build, hosting and delivery environment.
- Vercel — underlying website delivery infrastructure, including the technically necessary “__vdpl” deployment-pinning cookie identified on the current site.
- Cloudflare — Cloudflare Worker used to securely route Early Access submissions to the registration backend.
- Google — Google Apps Script, Google Sheets and Google Workspace / mail services used to process, store and administer Early Access registrations and internal administrative notifications.
We use these services only to the extent needed for website operation, security, Early Access administration and internal business processes.
International data transfers
Some of the service providers used for website hosting, technical delivery and Early Access processing operate internationally and may process data outside the European Economic Area. Where a transfer of personal data to a third country requires additional safeguards, we rely on the transfer mechanisms applicable to the relevant provider and service, such as an adequacy decision, participation in the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses and/or other safeguards recognised under applicable data-protection law.
The precise processing locations and safeguards can depend on the provider, service and technical routing. Further information is available in the privacy and data-processing information published by the respective providers, including Vercel, Cloudflare and Google.
Your rights
Subject to the conditions of the GDPR, you may have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and, where processing is based on legitimate interests, to object to the processing.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, contact us at team@architecthighlevel.com.
Supervisory authority
You also have the right to lodge a complaint with a competent data-protection supervisory authority. In Austria, the supervisory authority is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
Controller and contact
Controller within the meaning of the GDPR:
Arnold Kahr
Sole proprietor / Einzelunternehmen
Rauchgasse 34/2/10
1120 Vienna
Austria
Email: team@architecthighlevel.com
Website: architecthighlevel.com
Further statutory business information, including trade-authority, GISA and chamber information, is available in the Imprint.
Changes to this Privacy Policy
We may update this Privacy Policy when our website, services, technical providers or legal requirements change. The current version published on this website applies.
Last updated: 2 September 2026.