Data Processing Addendum

Roles

You are the controller. Palina Shalak, NIP 7011157683, REGON 525975130 is the processor. This addendum forms part of the Terms of Service and applies whenever we process personal data on your behalf.

What is processed, and for how long

The subject matter is the documents you upload and the values extracted from them. The categories of data subject are whoever those documents are about — typically applicants, employees or customers.

The categories of personal data include identity data, contact and address data, employment and financial data, and national identification numbers, because that is what the documents this product exists to read contain.

Processing lasts until you delete the data or close your account. There is no automatic deletion window.

Our obligations

We undertake the following.

• To process personal data only on your documented instructions, which for ordinary use means the actions you take in the product.
• To keep the data confidential and to bind our personnel to confidentiality.
• To assist you, so far as we reasonably can, with data subject requests and with security incidents.
• To delete the data on request, and to do so permanently rather than by hiding it.

Subprocessors

We use the subprocessors below. Which are active depends on how the instance is deployed. We will give notice before adding a new one.

• Neon — the PostgreSQL database holding profiles, extracted field values and document metadata.
• Vercel Blob — object storage for uploaded documents and generated output, when the deployment sets STORAGE_DRIVER=blob.
• Resend — email. For an account: address confirmation, password reset and the "you already have an account" notice. From the public site: an enquiry, a checklist or calculator result, or a demo booking, delivered both to us and back to you.
• The configured model provider (Anthropic, Google or OpenAI) — receives document content in order to extract fields from it, and, from the browser extension, the address and field labels of a page you ask to have read, or a picture and structure of a region you select. A deployment may reach it through the Vercel AI Gateway, which then routes the same content on.
• PostHog — product analytics, and only when you have consented. Field values and document content are never sent to it.

Security

Data is separated by organisation in the database itself, using row-level security rather than application-level filtering — a query that forgets to scope itself returns nothing rather than someone else's rows.

Passwords are stored hashed. Traffic is encrypted in transit. Uploaded documents are stored in the configured object store and removed when the record that points at them is deleted.

The formal security measures annex is [to be completed before publication].

International transfers

Some subprocessors named above may process data outside the country you are in. The transfer mechanism relied on, and the regions each subprocessor is configured to use, are [to be completed before publication].

Audits

We will answer reasonable questions needed to demonstrate compliance with this addendum. The audit arrangements are [to be completed before publication].