Privacy Policy — EvidenceEU
1. Data Controller
EvidenceEU operates as a multilingual document intelligence platform. As a data controller under Article 4(7) GDPR, we process personal data only to the extent necessary for providing our services.
2. What We Collect
We collect only the data you explicitly provide: uploaded documents, account credentials (email, name), and usage metadata (page views, feature interactions). We do not collect browsing history, location data, or sensitive personal data beyond what you upload.
3. Purpose & Legal Basis
Data is processed for document translation, OCR extraction, and secure exchange under Article 6(1)(a) (consent) and Article 6(1)(f) (legitimate interest — service improvement, security monitoring).
4. Data Retention
Uploaded documents are processed ephemerally — deleted immediately after translation or exchange completes. Account data is retained until account deletion. Usage metadata is retained for 90 days.
5. Your Rights
Under Articles 15–22 GDPR, you have the right to access, rectify, erase, restrict, and port your data. Contact us at privacy@evidenceeu.app to exercise these rights.
6. Third-Party Processors
We use Cloudflare Workers AI for LLM inference and Cloudflare D1 for structured storage. Both act as data processors under Article 28 GDPR. No data is transferred outside the EEA.