Privacy Policy
What Readoc processes, why, on what legal basis and for how long.
23 September 2026
1. Controller
- Controller
- Jakob Klingels
- Legal form
- Einzelunternehmen
- Address
- Ohlsdorfer Straße 90, 22297 Hamburg, Deutschland
- Data protection email
- jakob.klingels@web.de
2. What Readoc does
Readoc reads uploaded invoices, receipts and other documents (PDF or photo) with the help of an external text-recognition (OCR) service, shows the extracted details for review and correction, and exports them as XLSX, CSV or JSON once you confirm them. Without an account a limited free try is possible, whose result is only displayed and not stored; saving and exporting require an account.
The former provenance checks for text, websites, images, audio and video are no longer offered. Checks already saved remain readable, deletable and included in your data export, read-only, until their storage period ends; no new checks take place.
3. Overview of processing activities
| Activity | Data | Purpose | Legal basis | Recipients | Retention |
|---|---|---|---|---|---|
| Hosting | IP, headers, URL, time, referrer, device/browser data | delivery, security, diagnostics | Art. 6(1)(f); (b) for contract features | Vercel | per Vercel plan |
| Account/auth | name, email, password hash, language, verification state | registration, login, account | Art. 6(1)(b) | Vercel, Neon, Resend | until account deletion |
| Sessions | token, user ID, expiry, IP, user agent | login and security | Art. 6(1)(b)/(f) | Vercel, Neon | up to 30 days; expired rows deleted |
| Free try without an account | uploaded file as for a document upload; daily rotating, non-reversible keyed value derived from the IP address and UTC day, with a counter | read a document on trial, limit the free allowance, prevent abuse | Art. 6(1)(b) or (f) | Vercel, Neon; OCR processor (section 6) | file and result not stored (result only shown in the browser); the counter is deleted after the UTC day ends |
| Document upload and text recognition | uploaded file (PDF or image) with everything visible on it, filename, file type, size, page count | extract document data | Art. 6(1)(b) | Vercel; OCR processor (section 6) | file held in working memory for the request only, not stored; at the OCR processor see section 6 |
| Document results | extracted fields and line items, your corrections, confirmation status, filename, file checksum (duplicate detection), the OCR processor's request ID | review, correct, export, history, detect repeat uploads | Art. 6(1)(b) | Vercel, Neon | 31 days from upload, deletable by you before then |
| Archive of earlier checks (discontinued) | checks saved before the discontinuation: kind, time, credits, result; for text the original and analysed text, for websites the submitted and final URL, for files a shortened filename | viewing your own earlier results, evidence | Art. 6(1)(b) | Vercel, Neon | up to 31 days from saving, deletable by you before then; no new entries |
| Credits | user ID, amount, balance, source, reference | balance and billing | Art. 6(1)(b)/(c)/(f) | Vercel, Neon | account-linked; records per retention duty |
| address, content, delivery data | verification, reset, contract confirmation | Art. 6(1)(b)/(c)/(f) | Resend, Vercel | per retention schedule | |
| Support inquiry | name (optional), email, category, message, language, status, optional user ID | handle and answer the inquiry | Art. 6(1)(b) or (f) | Vercel, Neon, Resend | deletion period to be set before commercial launch |
| Checkout/payment | name, email, user ID, product; Lemon adds payment data | purchase, tax, contract | Art. 6(1)(b)/(c)/(f) | Lemon Squeezy | statutory periods |
| Withdrawal/cancellation | name, email, contract reference, declaration, timestamp | statutory consumer process | Art. 6(1)(b)/(c)/(f) | Vercel, Neon, Resend, Lemon | evidence period |
4. Your documents
PDF, JPG, PNG and WEBP up to 4 MB are supported, PDFs with at most 10 pages. The file type is checked from the file's content. The file is held in working memory for the duration of the request only, sent to the OCR processor for text recognition and not stored by Readoc.
The extracted details, your corrections and the administrative data listed above are stored for 31 days from upload. You can delete individual or all documents at any time before then. Documents often contain details about third parties (such as the issuer or recipient); upload only documents you are entitled to have processed.
Checks saved from the discontinued provenance checker remain in your account's archive for up to 31 days after they were saved and are then deleted automatically. You can delete them individually or all at once before then. Billing and credit records are kept separately and are unaffected.
Readoc does not use submitted content to train its own AI models. We make no statement about how the infrastructure providers we use handle customer content until the relevant contracts and settings are evidenced.
6. Recipients and providers
- Vercel
- Hosting, CDN, server functions, security and runtime logs. Specific processing locations, log-retention periods and contractual transfer safeguards depend on the active project configuration and documented contract terms and must be confirmed before live operation.
- Neon / Databricks
- Database for accounts, auth, document results, the archive of earlier checks, credits, orders, subscriptions, webhooks and audit data. The active region, possible support or affiliate access, and their contractual safeguards must be confirmed against the active project.
- Resend
- Transactional email for verification, password reset and contract-related events. Processing location, retention and transfer basis must be confirmed against the active account and contract.
- Lemon Squeezy / Sold through Link, LLC
- The checkout code integrates this provider for payments and orders. Its precise contractual role, the data sent and the transfer basis must be confirmed against the active store and contract before sales are enabled.
- Google (only if enabled)
- Optional OAuth sign-in. The actual legal entity, data flows and privacy terms must be confirmed before activation.
- Text recognition (OCR) of documents
- Microsoft Azure AI Document Intelligence, Region Germany West Central
The full content of each uploaded file is sent to Azure AI Document Intelligence. Microsoft temporarily stores the input and analysis result in the Azure resource's region and automatically deletes them under the documented service retention period, no later than 24 hours after analysis completes. Readoc also requests deletion of the analysis result immediately after processing. If that request fails, the event is recorded in technical logs without document content; Microsoft's automatic deletion remains the fallback. The specific resource and region, contractual roles, further recipients and any access from third countries depend on the Azure configuration actually in use and its contract documents and must be confirmed by the operator.
Until the provenance checker was discontinued, text was sent to Pangram for a statistical cross-check on express request. This no longer takes place.
For each provider actually used, it must be confirmed from the contract and configuration whether data is transferred to or accessed from a third country and which safeguards apply. This notice makes no blanket assurance about adequacy decisions, Standard Contractual Clauses or supplementary measures.
7. Your rights
Subject to the statutory conditions you have rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection to processing under Art. 6(1)(e)/(f) (Art. 21), withdrawal of consent with prospective effect (Art. 7(3)) and complaint to a supervisory authority (Art. 77).
The account provides self-service data export, deletion of individual or all documents, deletion of the archive of earlier checks, Google disconnect and account deletion. Restriction, objection, complex access requests and correction of non-editable data are handled initially by email. We may request proportionate proof of identity.
- Data protection contact
- jakob.klingels@web.de
- Competent supervisory authority
- Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
8. Account deletion and retention
Deletion requires re-authentication and express confirmation. An active subscription is first scheduled for cancellation via Lemon Squeezy; if that fails at the provider, the account is not irreversibly deleted and the request is shown as pending instead.
Sessions, OAuth tokens, document results, the archive of earlier checks, the account and non-retained credit and profile data are then deleted. Order, payment, tax and required evidence records are detached from the operational account, blocked for other purposes and deleted once their retention duty ends. External identifiers remain personal data until genuinely anonymised.
Commercial and tax retention periods are applied only to the extent actually required. The specific mapping of document categories and the deletion periods that follow from it will be determined before commercial launch and added here.
9. Minors and changes
A free try is possible without an account. Stored documents, credits and paid products require account and contract data. Paid offerings are available only to persons legally capable of entering into contracts.
18+
We update this policy when functions, recipients or the legal position change. Material changes affecting an existing contract are additionally notified in an appropriate manner. The published version carries its date.