Can I get a signed DPA / AVV?

Yes. We sign a standard German GDPR DPA (Auftragsverarbeitungsvertrag) on request - reach out from /sales. The text is the standard form most customer DPOs already know, no surprise clauses; we also accept your own paperwork if your legal team prefers their template. Reply time is within a working day. Most teams under 50 seats don't need one (the standard plan terms cover the legal posture); larger setups get a short signed addendum alongside.

How do I export my data?

Account settings → export. Returns a JSON archive containing every record you own, every file you uploaded, and the relevant audit-log entries. No support ticket, no waiting period, no fee. Same export shape works on every plan.

How do I delete my account?

Account settings → delete. Confirms once, then removes records, files, embeddings, and audit-log entries within 30 days. Stripe payment metadata stays as long as German tax law requires it (10 years), in line with §147 AO; everything else is gone.

Who are your subprocessors?

Two: Stripe (payment processing only, transferred under the EU-US Data Privacy Framework) and our transactional mail relay (EU-hosted). Neither sees your records. The full list and what each one is allowed to touch lives at /privacy and /security.

Does Contact Book use Google Analytics or Meta Pixel?

No. No third-party analytics at all. Device + session metrics live in our own Postgres + Redis. The cookie banner that GA / Meta require doesn't apply because we don't load them - one fewer dialog between a visitor and the page they came for.

Contact Book

Compare

Contact Book: the GDPR-friendly alternative to Monica

Plain-language privacy notice, standard German GDPR DPA available on request, self-serve export + delete.

GDPR alternative

Personal CRM

Open source

Julia YukovichCo-Founder + CEO

·February 27, 2026·

2 min read

GDPR isn't a checkbox - it's a posture. If you're moving off Monica because their AVV / DPA is opaque, Contact Book is what a clean alternative looks like: subprocessor list of two (Stripe + mail relay), self-serve export + delete from account settings, and a standard German GDPR DPA on request when your procurement team needs one.

At a glance

Monica is the elder statesman of the personal-CRM space - mature, open-source, and self-hostable. Contact Book is younger and lighter, with a sharper UI, live multi-tab updates, and a deliberately small surface. If you want to self-host on a Pi and tinker, Monica is hard to beat. If you want a clean, fast personal CRM that you don't run yourself, with bilingual support and a hosted plan that costs less than two coffees a month, that's us.

GDPR posture

GDPR is a posture, not a checkbox

Three things matter under GDPR for a tool like this: (1) lawful basis for processing, (2) data subject rights (export, delete, port), and (3) the auftragsverarbeitungsvertrag / DPA chain. Contact Book treats them as engineering invariants, not legal optics. Lawful basis is the contract you sign with us. Subject rights are self-serve from your account settings - no support ticket required. The subprocessor list has two entries (Stripe + mail relay). A standard German GDPR DPA is available on request from /sales whenever your procurement team needs one - we don't charge for it and don't gate it behind a plan tier. Where Monica sits on each of these is the rest of this page.

Contact Book vs Monica: GDPR comparison

	Ours Contact Book	Theirs Monica
Self-hostable
Open source
Hosted plan available
Hosted in Germany (EU)		France (EU)
Live multi-tab updates (websocket)
Bilingual UI (EN + DE)		Multiple, EN+DE included
Stay-in-touch cadence
Gifts tracker
Activity / journal log
Pets
API + drop-in clients (15 langs)		API only
MCP server for AI agents
Hosted price (per month)	From €1	$9 / €9

When to pick which

Pick Contact Book when

You want a hosted product that's clean, fast, and bilingual out of the box.

Live multi-tab updates matter - you keep two tabs open and want the second to react to the first.

You'd like an MCP server + drop-in clients in 15 languages so AI agents can use the same product you do.

EU jurisdiction, but specifically Germany under German law.

Pick Monica when

You want to self-host on your own box and skim the source.

Open-source on principle - you only adopt tools you can fork.

You like Monica's heavy, journal-style UI and want every preference dial it ships.

GDPR questions

What customer data-protection teams typically ask before signing a DPA.

Start with Contact Book

Free plan, no credit card. We host in Germany. Export + delete are self-serve.

Written by

Julia Yukovich

Co-Founder + CEO

Julia is one of the Co-Founders. She handles design, product direction, and most of the support replies that arrive in the morning.

julia.yukovich at aicuflow dot comLinkedIn