Privacy Policy

The data controller is Ing. Marek Javůrek, Sopřeč 29, 533 16, ID number 03986381, operator of the service ParseDoc.dev. For anything related to personal data, write to [email protected].

We process your account information, such as email, login, payments, and settings, as a controller under these principles.

Documents you upload are your data and may contain personal data of others, like a freelancer's name on an invoice. You are the controller for those, and we are the processor: we read, check, convert, and store the document; we don’t share it elsewhere and delete it after the retention period.

• Account and login: email, name, and photo from Google or Microsoft, when the account was created and when you last logged in. Without this, we won’t let you access your account. Legal basis is contract fulfillment.
• Company information: ID number, name, and account settings if you fill them out. For document processing. Contract fulfillment.
• Payments: plan, payment history, and customer identifier in Stripe. Card details are only visible to Stripe and do not reach us. Contract fulfillment and legal obligation to keep accounting records.
• Activity log: what happened in the account and when, including IP address and browser for actions. This serves for security and error tracking, and you can see it in the app under the Activity tab. Legitimate interest.
• Receiving documents: for email receipts, sender addresses you allow, and incoming messages with documents; for Telegram, chat ID and username. Only if you activate the function. Contract fulfillment.
• Emails from us: morning summary, account alerts, and invitations to shared folders. You can set what you receive in the app, and the summary can be unsubscribed from via a link in the email. Contract fulfillment and legitimate interest.
• Help questions: a question posed in a sentence is sent to the model, which formulates an answer. We do not store the text of the question, only how many were asked per day, for daily limit reasons.

We do not do advertising or profiling and do not sell data. While the model reads documents, it does not decide anything about you that would have a legal impact.

Only with suppliers without whom the service cannot operate, and only what they need for their part:

• OpenAI: the model that reads documents. Receives images of pages and document text and does not use them for model training as per its API terms.
• Supabase: database and login.
• Cloudflare: file storage and email reception.
• Hetzner: server where the application runs.
• Stripe: payments and invoices for subscriptions.
• Brevo: sending emails. Receives recipient address and email text, does not include document contents.
• Telegram: bot if you connect it.
• Google and Microsoft: login. They send us your email, name, and photo based on what you approved.
• ARES registry and VIES registry: only ID number, VAT number, or company name for supplier verification.

Some of them are located outside the European Union, mainly in the USA. Transfers there are based on standard contractual clauses of the European Commission or on the data protection framework between the EU and the USA, depending on what the supplier offers.

• Documents based on the plan at upload time: 30 days on Free, one year on Starter, five years on Business, and ten years on Scale. Then they are deleted entirely, including the original.
• A deleted document stays in the trash for seven days and then disappears. Emptying the trash deletes it immediately.
• Activity records are kept for one year.
• Account until you cancel it. To cancel, please write an email.
• Subscription invoices are kept by Stripe for the duration required by law.

We only store what is necessary for the application to function in the browser: login, language, theme, filter expansion, and your choice in the consent bar. We do not use analytical or advertising scripts. If we were to implement them, they would only activate after your consent, which can be changed anytime via the Cookies settings link in the footer.

Transfers are encrypted, and accesses to your accounting are stored encrypted. Documents are separated by accounts, and only those you invite can see the shared folder. On our side, only the operator can access the document contents when solving a problem you report.

You have the right to:

• know what data we have about you and receive a copy of it,
• have it corrected if it is inaccurate,
• have it deleted if we do not need to keep it by law,
• restrict its processing or object to processing on the grounds of legitimate interest,
• receive it in a machine-readable format; you can also download documents yourself, in bulk and including originals,
• file a complaint with the Office for Personal Data Protection (uoou.gov.cz).

Just write to [email protected]. We will respond within a month at the latest.

When the policy changes, we will update the date at the top and record substantial changes in the news section of the help.