Legal
Privacy policy
This policy explains how personal data is processed when you use DUOLEXX (GDPR).
Placeholder — please replace with your actual details before going live (have it reviewed by a lawyer if needed).
Controller
[Name / company, address, contact] — see the imprint.
What data we process
Account and contact data, the document content you enter, payment data (via Stripe), technical access data.
Purposes & legal bases
Contract performance (creation/signature/payment, Art. 6(1)(b)), legitimate interest (operation/security, (f)), consent where required ((a)).
Processors & services
Hosting (own server), Appwrite (data), Stripe (payments), Resend (email confirmation), Umami (privacy-friendly analytics). [Add details / DPAs.]
Retention
As long as your account exists or statutory retention periods require. [Specify.]
Your rights
Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.