- DocuElevate only uses essential session cookies for the following purpose: + DocuElevate uses only strictly necessary session cookies for the following purpose:
These cookies are mandatory for the proper functioning of our service. Without these cookies, you would be required to log in repeatedly during your browsing session.
++ Because these cookies are strictly necessary for the service to function, they are exempt from prior-consent requirements under the EU ePrivacy Directive (Art. 5(3)) and equivalent national implementations. We do not set any optional, analytics, advertising, or tracking cookies. +
- The session cookies we use are temporary and are deleted when you close your browser. -
+| Name | +Type | +Purpose | +Duration | +
|---|---|---|---|
| session | +Strictly Necessary | +Maintains your authenticated session; required for login to function. | +Session (deleted on browser close or logout) | +
| cookieNoticeDismissed | +Strictly Necessary | +Stores your acknowledgement of the cookie notice so it is not shown repeatedly (stored in localStorage, not a cookie). | +Persistent (browser localStorage) | +
- For more information about how we handle your data, please see our Privacy Policy. + For more information about how we handle your data, please see our Privacy Notice.
- While most web browsers allow you to control cookies through their settings, please note that blocking or deleting our session cookies will prevent DocuElevate from functioning properly, as user authentication relies on these cookies. + Most web browsers allow you to control cookies through their settings. However, blocking or deleting our session cookies will prevent DocuElevate from functioning, as user authentication relies on these cookies. +
++ You may also clear the cookie notice acknowledgement stored in your browser's localStorage at any time via your browser's developer tools (Application → Local Storage).
- By using DocuElevate, you consent to our use of cookies as described in this policy. This Cookie Policy is part of and incorporated into our Terms of Service. + This Cookie Policy is part of and incorporated into our Terms of Service and Privacy Notice.
Last Updated: {{ build_date|default(current_date|default('April 7, 2024')) }}
-- The controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR) is DocuElevate. + The controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR) and equivalent privacy laws worldwide is: +
+
+ Christian Louis IT Beratung
+ Alter Steinweg 3, 20459 Hamburg, Germany
Contact Email: docuelevate@christian-louis.de
-- This notice applies to the DocuElevate web application, hosted at {{ request.url.scheme }}://{{ request.url.netloc }}/. + For all privacy-related requests (access, deletion, rectification, opt-out, or complaints), please contact us at the email address above. + We will respond within 30 days (or the period prescribed by applicable law).
- User Authentication: We use Google, Dropbox, and Microsoft OAuth for sign-in. Through these services, we may receive information such as your name, email address, and profile picture. + This notice applies to the DocuElevate web application, hosted at + {{ request.url.scheme }}://{{ request.url.netloc }}/. +
++ It covers all users globally, including those in the European Union (EU), European Economic Area (EEA), + Germany, United Kingdom (UK), Switzerland, Ukraine, United States (US), Canada, Latin America (Latam), + Asia-Pacific, and Japan. Market-specific disclosures are provided in dedicated sections below. +
++ User Authentication: We use OAuth 2.0 (Google, Dropbox, Microsoft/OneDrive) and optional + local authentication. Through OAuth, we may receive your name, email address, and profile picture.
- Purpose: We use this information to authenticate you, personalize your experience, and provide the core functionality of DocuElevate. + Document Processing: Documents you upload are processed for OCR (optical character recognition), + metadata extraction, and storage to your chosen cloud provider. Document content is processed only for the + purpose you initiate and is not stored beyond what is operationally necessary. +
++ Audit Logs: We maintain limited audit logs (action type, timestamp, user identifier) to + ensure service integrity and security. These logs do not include document content.
Legal Basis (GDPR Art. 6): Our primary legal bases for processing are:
- We may use cookies or similar technologies to maintain your session, remember your preferences, and enhance your user experience. + DocuElevate is designed with data minimization as a core principle (GDPR Art. 5(1)(c)):
-- For more information about our use of cookies, please visit our Cookie Policy. -
-- OAuth Providers: Google, Dropbox, and Microsoft. These providers may process your personal data according to their own privacy policies. -
-- No Additional Sharing: We do not share, sell, or otherwise disclose your personal data to third parties for advertising or marketing purposes. -
-- Cloud Storage Integration: We integrate with Google Drive, Dropbox, OneDrive and other storage providers to enable you to save and access your documents across services. -
-- We retain your personal data only as long as necessary to provide the DocuElevate service or to comply with legal obligations. -
-- If you wish to have your data deleted or your account removed, please contact us at docuelevate@christian-louis.de. -
-- We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. -
-+ OAuth Providers (Google, Dropbox, Microsoft): When you choose to authenticate via + OAuth, the respective provider processes your credentials and may share limited profile information + with us. These providers maintain their own privacy policies. +
++ Cloud Storage Providers (Google Drive, Dropbox, OneDrive, Amazon S3, Nextcloud, WebDAV/SFTP/FTP): + Documents are stored in the cloud provider you configure. Your configured credentials are stored + encrypted in the application database and are used solely to perform the storage operations you request. +
++ AI Processing Services (OpenAI, Azure Document Intelligence, others): When you initiate + OCR or AI-based metadata extraction, document data is transmitted to the AI service you or your + administrator has configured. This transmission is governed by a data processing agreement with the + respective provider. +
++ No Sale or Sharing for Advertising: We do not sell, rent, or share your personal data + with third parties for advertising, marketing, or any purpose unrelated to providing the service. +
++ DocuElevate is hosted in the European Union / EEA by default. Where personal data is transferred + outside the EEA (for example to US-based AI service providers such as OpenAI), we rely on + appropriate safeguards including: +
++ You may request a copy of the relevant safeguards by contacting us at + docuelevate@christian-louis.de. +
++ We retain personal data only as long as strictly necessary to provide the DocuElevate service or to + comply with legal obligations: +
++ To request deletion of your account and all associated personal data, please contact us at + docuelevate@christian-louis.de. +
++ We implement appropriate technical and organisational measures (TOMs) to protect your personal data, + including: +
++ Under GDPR (and the UK GDPR / Swiss nFADP equivalent), you have the following rights: +
++ To exercise any of the above rights, contact us at + docuelevate@christian-louis.de. + We will respond within one calendar month (extendable by two further months for complex requests). +
++ If you are a resident of California or another US state with applicable privacy legislation + (including Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA), the following additional + disclosures apply: +
++ To submit a verifiable consumer request, contact us at + docuelevate@christian-louis.de. + We will respond within 45 days (extendable by an additional 45 days when reasonably necessary). +
++ If you are located in Canada, the following applies under the Personal Information Protection and + Electronic Documents Act (PIPEDA) and applicable provincial legislation (including Québec Law 25 / + Bill 64): +
++ Direct privacy complaints to our Privacy Officer at + docuelevate@christian-louis.de, + or to the Office of the Privacy Commissioner of Canada. +
++ Brazil (LGPD – Lei Geral de Proteção de Dados, Law 13.709/2018): + If you are located in Brazil, you have the following rights under the LGPD: +
++ Other Latin American Countries: We also recognise applicable privacy laws in Argentina + (PDPA), Mexico (LFPDPPP), Chile, Colombia (Ley 1581), and others. Users in these jurisdictions may + exercise equivalent rights as outlined under their national law by contacting us. +
++ Contact: + docuelevate@christian-louis.de +
++ Japan (APPI – Act on the Protection of Personal Information): + Japanese residents may request disclosure, correction, addition or deletion, suspension of use, + erasure, or suspension of third-party provision of their personal information held by us. + Third-party disclosures require your prior consent except where permitted by law. +
++ Australia (Privacy Act 1988 and Australian Privacy Principles): + Australian residents may request access to and correction of their personal information. + We will respond to access requests within 30 days. Complaints may be lodged with the + Office of the Australian Information Commissioner (OAIC). +
++ South Korea (PIPA – Personal Information Protection Act): + Korean residents may request access, correction, deletion, and suspension of processing. + We handle personal information of Korean residents in accordance with the PIPA. +
++ Other APJ markets (Singapore PDPA, New Zealand Privacy Act, India DPDP Act): + We recognise the data protection rights afforded to residents of these jurisdictions under their + respective national laws. Contact us to exercise your rights. +
++ Contact: + docuelevate@christian-louis.de +
++ Users located in Ukraine are protected under the Law of Ukraine "On Personal Data Protection" + (No. 2297-VI). Your rights include access to, correction, blocking, and deletion of your personal + data, as well as the right to object to processing. +
++ Contact: + docuelevate@christian-louis.de +
++ We may update this notice from time to time to reflect changes in our practices or applicable laws. + The "Last Updated" date at the top of this page indicates when the notice was last revised. + Where changes are material, we will notify users via in-application notification or email where + appropriate. +
++ If you have any questions or concerns about this Privacy Notice or your personal data, please + contact us at + docuelevate@christian-louis.de. +
++ Please also review our Terms of Service, + Cookie Policy, and + License Information.