Privacy Policy

Last updated: March 23, 2026

1. Data Controller

Giesswein Creativ GmbH
Email: mail@software.tirol
Web: dotdocs.dev

2. Overview

The protection of your personal data is important to us. This Privacy Policy informs you about what data we process in connection with the dotDocs API and the website dotdocs.dev, for what purpose, and on what legal basis.

3. Data Processed

3.1 During Registration and API Usage

Data Type	Purpose	Legal Basis	Retention Period
Email address	Account creation, billing, communication	Contract performance (Art. 6(1)(b) GDPR)	Until account deletion
Name (optional)	Personalization, billing	Contract performance (Art. 6(1)(b) GDPR)	Until account deletion
API key	Authentication, usage attribution	Contract performance (Art. 6(1)(b) GDPR)	Until account deletion
Usage data (documents per month)	Quota monitoring, billing	Contract performance (Art. 6(1)(b) GDPR)	Current billing period

3.2 Uploaded Documents

Documents uploaded via the API are processed exclusively in working memory and are not permanently stored. After extraction is complete, documents are immediately deleted from memory. No logging of document content takes place.

For AI-powered extraction, documents are transmitted to the third-party provider Anthropic, PBC (San Francisco, USA). Anthropic processes the data solely for the purpose of generating the API response and does not permanently store the content. The transfer is based on Art. 49(1)(b) GDPR (contract performance) and Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

3.3 When Visiting the Website

When visiting dotdocs.dev, the following data is automatically collected by the web server:

• IP address (anonymized)
• Time of access
• Page visited
• Browser and operating system

This data is processed on the basis of legitimate interest (Art. 6(1)(f) GDPR) to ensure operation and detect abuse. No cookies are set and no tracking tools (Google Analytics, etc.) are used.

4. Payment Processing

Payment processing is handled by Stripe, Inc. (San Francisco, USA). When subscribing to a paid plan, your payment details (credit card number, expiration date) are processed directly by Stripe. The Provider does not have access to your full payment details.

Stripe processes data in accordance with their Privacy Policy. The transfer to the USA is based on EU Standard Contractual Clauses.

5. Data Processors

Service Provider	Purpose	Location
Anthropic, PBC	AI-powered document extraction	USA
Stripe, Inc.	Payment processing, customer management	USA
Hetzner Online GmbH	Hosting of API and website	Germany

6. Your Rights

Under the GDPR, you have the following rights:

• Access (Art. 15 GDPR): What data do we process about you?
• Rectification (Art. 16 GDPR): Correction of inaccurate data
• Erasure (Art. 17 GDPR): Deletion of your data (right to be forgotten)
• Restriction (Art. 18 GDPR): Restriction of processing
• Data Portability (Art. 20 GDPR): Export of your data
• Objection (Art. 21 GDPR): Objection to processing

To exercise your rights, contact us at mail@software.tirol.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection authority:

Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna, Austria
www.dsb.gv.at

8. Changes

We reserve the right to amend this Privacy Policy as needed to adapt it to changed legal requirements or changes to the service. The current version is always available at dotdocs.dev/datenschutz.