Privacy policy

Last updated: October 2026. This is an English translation; the German version is legally binding.

1. Controller

WorkNull
Owner: Denis Kilickaya
Kalk-Mülheimer Str. 288a
51065 Cologne
Germany

2. Overview

We process personal data only as far as necessary to run this website, answer your inquiries and run our live demos. We use no cookies and no tracking or advertising tools. For cookie-free visitor statistics we use Cloudflare Web Analytics (see section 3). No external fonts are embedded; videos are served from our own server.

3. Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). When you visit, Cloudflare processes technically necessary data such as IP address, date and time, page requested, browser and operating system in order to deliver the site and protect it against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Transfers to the USA are based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses. A data processing agreement is in place with Cloudflare.

Visitor statistics (Cloudflare Web Analytics)

To understand how our website is used, we use Cloudflare Web Analytics from the same provider. It sets no cookies and stores no data on your device; no user profiles are created and you are not tracked across websites. It records aggregated information such as pages viewed, referring website, country, browser and device type, and load times. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in designing the website according to demand).

4. Contact form and email

When you contact us via the form or by email, we process the data you provide (e.g. name, email, company, message) to answer your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. Form data is sent to our automation platform n8n Cloud (n8n GmbH, Novalisstraße 10, 10115 Berlin, Germany). We send emails via Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany). We delete your inquiry once it has been dealt with, unless statutory retention periods apply.

5. Live demos and website check

In our live demos (inquiries, onboarding, receipts) and the free website check, your input or uploaded files are sent to n8n Cloud (n8n GmbH, Berlin; hosted in the EU) and analysed automatically. In the inquiry and onboarding demos you receive the result by email at the address you enter, which is why you confirm beforehand that it is your own address. The inquiry demo also adds a sample row to a Google Sheets table (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; transfer to the USA possible, safeguarded by the EU-US Data Privacy Framework or EU Standard Contractual Clauses). Please use sample data rather than real sensitive data. We delete demo entries regularly, after 30 days at the latest. Legal basis: Art. 6(1)(b) GDPR (use of the demo at your request).

AI services (receipt demo)

For the receipt demo we use AI models provided by OpenAI (OpenAI Ireland Ltd., The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). The uploaded file is sent to OpenAI for analysis. Processing in the USA cannot be ruled out; the transfer is safeguarded by a data processing agreement with OpenAI and the EU Standard Contractual Clauses. According to OpenAI, data submitted via the API is not used to train its models. We do not store the receipts ourselves. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give before uploading and may withdraw at any time with effect for the future. The sample invoice we provide contains no real personal data.

6. External links

Our site links to our Fiverr profile. Data is only transferred to Fiverr once you click the link; Fiverr's privacy policy then applies.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Just email hello@worknull.com.

You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

8. TLS encryption

This website uses TLS encryption, recognisable by “https://” in the address bar.