Privacy Policy

Last updated: 26 September 2026

This policy explains what personal data Veildoc processes, why, and what rights you have. It is written for the customers of the service (firms and professionals) and, where relevant, for the people whose data appears in the documents they redact.

1. Who is responsible

The data controller for your account data is Juan Jesus Martinez Ortuño, a sole trader trading as Veildoc, of 1 Aderrig Gardens, K78 F8F8, Ireland (contact: hola@veildoc.online).

2. What we process, and what we do not

• Account data: your email, optional name, a securely hashed password, your plan, your credit balance and a log of activity (date, number of pages processed, credits used). Legal basis: performance of the contract (Art. 6.1.b GDPR).
• Documents: your PDF files are opened and rendered inside your browser. The file itself is never uploaded to our server and we never store it.
• Page text: to detect personal data, the text extracted from each page is sent to our server, which forwards it to an AI provider for analysis and returns the result to your browser. We do not store that text, the results or the file name. For this processing we act as a data processor on your behalf; you remain the controller of the documents you process.
• Technical data: IP addresses are kept temporarily to limit abuse (rate limiting and failed sign-in attempts) and are deleted within 24 hours.

3. Service providers

• Hosting: Hostinger.
• Payments: Paddle.com, our reseller and Merchant of Record, processes payments and billing details as an independent controller under its own privacy policy. We never see or store card numbers.
• AI analysis of page text: Anthropic (Claude), through its paid commercial API. Anthropic may process data outside the EEA under the European Commission's Standard Contractual Clauses, and does not use content sent through its commercial API to train its models.

We do not sell or share personal data with anyone else and we do not use it for advertising.

4. How long we keep data

Account data is kept while your account is active and deleted within 30 days of a deletion request, except where the law requires us to keep billing records. Page text is discarded as soon as the analysis is returned.

5. Your rights

You can request access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to hola@veildoc.online. You may also lodge a complaint with the Data Protection Commission in Ireland (www.dataprotection.ie) or the supervisory authority where you live.

6. Security

Passwords are stored hashed, sessions use secure HTTP-only cookies, connections are encrypted (HTTPS), and account records are kept outside the publicly accessible part of the server.

7. Your responsibility as a customer

The automatic detection can miss data or mark data that is not personal. You must review every document before sharing it. If you process documents containing third parties' data, you are responsible for having a legal basis to do so.