Privacy Policy

The data controller for data processing on this website is:

The processing of your personal data is based on the following legal grounds:

• Contract fulfillment (Art. 6 para. 1 lit. b GDPR): Processing to fulfill the usage contract
• Consent (Art. 6 para. 1 lit. a GDPR): When you have expressly given us your consent
• Legitimate interests (Art. 6 para. 1 lit. f GDPR): Ensuring IT security, improving our service
• Legal obligation (Art. 6 para. 1 lit. c GDPR): Fulfillment of legal retention and reporting obligations

We employ technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons:

• SSL/TLS encryption for all data transmissions
• Encrypted data storage (Encryption at Rest)
• Regular security updates and penetration tests
• Access control and authentication (multi-factor authentication)
• Tenant separation at database and storage level
• Regular backups with geographic redundancy
• Logging and monitoring of security-relevant events

We only store personal data for as long as necessary for the respective purposes or as long as legal retention periods exist:

• User data: For the duration of the contractual relationship plus 30 days after contract termination
• Contract data: 10 years in accordance with commercial and tax retention requirements
• Audit logs: 7 years to fulfill compliance requirements
• Marketing data: Until revocation of consent

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about your data stored with us
• Right to rectification (Art. 16 GDPR): You can request the correction of incorrect data
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing
• Right to data portability (Art. 20 GDPR): You can receive your data in a structured format
• Right to object (Art. 21 GDPR): You can object to the processing of your data
• Right to withdraw consent (Art. 7 para. 3 GDPR): You can revoke given consents at any time

To exercise your rights, please contact: contact [@] docxpert.io

You also have the right to lodge a complaint with a data protection supervisory authority.

The platform uses technically necessary cookies. Optional Google Analytics measurement requires your consent:

• Session cookies for authentication
• Cookies for language selection
• Cookies for security features (CSRF protection)

We optionally use Google Analytics 4 to measure public pages and selected app usage. Without consent, the Google tag is not loaded. Google processes pseudonymous technical identifiers and may process data outside Switzerland and the EEA, including in the USA. We do not transmit names, email addresses, document contents or internal user, tenant and document IDs; page paths are sanitized and query parameters and referrer URLs are not transmitted. Your choice is stored locally for up to 180 days and can be changed through Privacy settings at any time. Withdrawal stops further measurement but does not automatically delete previously collected data. Internal operational analytics remain separate.

External AI processing may involve international transfers. Locations and applicable transfer safeguards must be confirmed against current provider and contractual documentation; no single region or universal transfer mechanism is guaranteed here. Potential safeguards to assess include:

• Adequacy decision of the EU Commission (EU-US Data Privacy Framework)
• Standard contractual clauses according to Art. 46 GDPR
• Additional technical and organizational measures

We reserve the right to adapt this privacy policy as necessary to adjust it to changed legal situations or changes to our services. The version available at the time of your visit applies.