Privacy Policy

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

How do we collect your data?

• Through your inputs (e.g. contact form)
• Automatically when you visit the site (e.g. browser, operating system, time)

What do we use your data for?

• To provide the website without errors
• To analyse user behaviour
• For contract processing and enquiries

What rights do you have?

• Access to stored data
• Correction or deletion
• Withdrawal of granted consents
• Restriction of processing
• Right to lodge a complaint with the supervisory authority

External hosting

This website is hosted externally. IP addresses, contact requests, meta and communication data and other website data may be processed in the process.

Data processing agreement

We have concluded a data processing agreement (DPA) in accordance with GDPR.

Data protection

The protection of your personal data is our highest priority. Processing is carried out in accordance with GDPR and this privacy policy.

Storage duration

Data is stored until the purpose ceases to apply or the statutory retention periods expire.

Legal bases

• Art. 6(1)(a) GDPR – consent
• Art. 6(1)(b) GDPR – contract
• Art. 6(1)(c) GDPR – legal obligation
• Art. 6(1)(f) GDPR – legitimate interest

Recipients of personal data

Data is only passed on if this is legally permitted or required (e.g. tax authorities, hosting).

Withdrawal / objection

Consents can be withdrawn at any time. You also have the right to object under Art. 21 GDPR.

SSL/TLS encryption

This website uses SSL/TLS for secure data transmission.

Cookies

This website uses cookies. These may be technically necessary or used for analysis or marketing purposes.

Contact form

Data from the contact form is stored to process the enquiry and is not passed on without your consent.

Email / phone

Transmitted data is stored to process the enquiry.

Where Documents are stored

Documents uploaded to the Service are stored exclusively in your own Google Drive or Microsoft OneDrive account. We do not keep copies of the files on our servers. On our servers, located in the European Union, we store only Account data together with the data extracted from Documents and their metadata (file name, size, page count, recognised fields, assigned contractor and similar).

Automated data extraction

To read the data from a Document, its content is transmitted to our artificial intelligence provider, Anthropic. Documents are not used to train models. Processing takes place solely to deliver the service described in the Terms of Service.

Email

Documents can be sent to your Account's dedicated email address - inbound mail is handled by the provider Postmark. Outbound messages from the Service (notifications, reports, documents sent to contractors) are delivered by the provider Resend, unless you connect your own Microsoft 365 mailbox, in which case they are sent from your account.

Transfers outside the European Economic Area

The providers named above (Anthropic, Postmark, Resend) may process data outside the European Economic Area, including in the United States. Such transfers take place on the basis of data processing agreements and the standard contractual clauses approved by the European Commission.

Retention and deletion

Account data and data extracted from Documents are retained for the duration of the agreement. You can request deletion of your Account in Account settings or by contacting us - we handle such requests within 30 days. We then delete Account data, the data extracted from Documents and their metadata. Files stored in your Google Drive or OneDrive account remain untouched and you can delete them yourself. Some data may be retained longer where the law requires it (e.g. billing records).

Subprocessors

We only use providers with whom we have concluded data processing agreements, each in a strictly defined role and only to the extent necessary to deliver the service.