1. Controller
The controller within the meaning of the GDPR for the Kessly platform is:
EXCIT3D GmbH, Mankhauser Str. 1, 42699 Solingen, Germany
Email: info@excit3d.de
Phone: +49 (0) 212 26049777
2. Overview
Kessly is an online service that converts recipes into Thermomix instructions. We process personal data only where necessary to provide the service, fulfil contracts, process payments or comply with legal obligations.
3. Data we process
Account data: email address and authentication information when registering or signing in.
Usage data: number of free conversions used, subscription status and saved recipes (source URL, title, ingredients, steps, language settings).
Payment data: payments are processed by Stripe. We do not store full payment card details.
Technical data: IP address, browser type, access time and session cookies to maintain your login.
Recipe content: URLs you submit or manually pasted recipe text are processed for conversion and stored.
4. Purposes and legal bases
Provision of the service and contract performance (Art. 6(1)(b) GDPR): account creation, conversion, recipe storage, subscription management.
Legitimate interests (Art. 6(1)(f) GDPR): IT security, abuse prevention, technical operation of the website.
Legal obligations (Art. 6(1)(c) GDPR): retention of tax and commercial records.
5. AI-assisted processing
To convert recipes we use AI services (OpenAI or Google Gemini, depending on configuration). Recipe titles, ingredients and instructions are transmitted to the respective provider to generate Thermomix instructions.
Processing is based on Art. 6(1)(b) GDPR to provide the service you requested. We have or will enter into data processing agreements with providers pursuant to Art. 28 GDPR. Where data is transferred to third countries (e.g. the USA), we rely on appropriate safeguards, in particular EU Standard Contractual Clauses.
6. Recipients and processors
Supabase Inc. — authentication and database (EU region eu-central-1).
Stripe Payments Europe Ltd. — payment processing.
Self-hosted Docker deployment on own Linux server.
OpenAI LLC or Google LLC — AI-assisted recipe conversion.
Resend Inc. (optional) — sending login emails where configured.
7. Cookies
We use technically necessary cookies or similar technologies to maintain your login and ensure secure operation of the service. These cookies are required to use the service.
We do not use analytics or marketing cookies unless separately stated.
8. Retention
Account data and saved recipes remain stored while your account exists. You can delete your account at any time in profile settings.
Billing-related data is retained in accordance with statutory retention periods (typically 10 years).
Server log data is retained only as long as necessary for operation and security.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing of your personal data.
Where processing is based on consent, you may withdraw consent at any time with effect for the future.
You have the right to lodge a complaint with a supervisory authority. In Germany, the State Commissioner for Data Protection of North Rhine-Westphalia (LDI NRW) is competent.
Please contact: info@excit3d.de
10. Last updated
Last updated: August 2026