Privacy Policy

1. Data Controller

This service is operated by Article 11 ("we", "us", "our"), contactable at euaiactdocs@gmail.com. We act as the data controller for the personal data processed through this service.

2. What Data We Collect

When you use this service, you provide information about your AI system (company name, system name, system description, and related technical details) via our form. This data is collected solely for the purpose of generating your Article 11 Technical Documentation. If you opt in to our deadline reminder, we also collect your email address.

3. How We Use Your Data

Your form data is used exclusively to generate your documentation. It is sent to the Anthropic API for AI processing and is not stored on our servers beyond the duration of your session. Your browser temporarily stores form data in localStorage, which is deleted automatically once your document has been generated. If you provide your email address for the deadline reminder, it is stored securely via Formspree and used only to send you a single reminder email before the August 2, 2026 enforcement deadline.

Legal basis for processing (GDPR Art. 6): We process your data on the basis of contract performance (Art. 6(1)(b) GDPR) — the processing is necessary to deliver the compliance documentation you have purchased. For optional services such as deadline reminders, we rely on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time by emailing us.

4. Payment Processing

All payments are processed securely by Stripe. We never see, store, or have access to your credit card details or payment information. Stripe's privacy policy governs the handling of your payment data. Please review Stripe's privacy policy at stripe.com/privacy.

5. Third-Party Services

We use the following third-party services to operate this tool:

• Anthropic API — processes your form data to generate documentation content. Your data is transferred to Anthropic's servers in the United States in reliance on Anthropic's Data Processing Agreement and Standard Contractual Clauses (SCCs) pursuant to Article 46(2)(c) GDPR. Anthropic's commercial API data policy confirms that API inputs and outputs are not used to train generative models.
• Stripe — handles payment processing securely
• Vercel — hosts the application
• Formspree — stores email addresses for optional deadline reminders

6. Data Retention & Deletion

We do not maintain a database of your form submissions or generated documents. Your technical inputs are processed via the Anthropic API solely to generate your documentation, and are scheduled for deletion from our temporary processing buffers once your Compliance Pack or Exemption Memo has been generated and downloaded. We do not store your technical inputs indefinitely. Email addresses collected for deadline reminders are retained until after the August 2, 2026 deadline, after which they are deleted.

7. Your Rights

You have the right to request deletion of any personal data we hold about you. To exercise this right, email us at euaiactdocs@gmail.com with the subject line "Data Deletion Request." We will process your request within 30 days.

Under the GDPR, you also have the right to: access your personal data (Art. 15); rectification (Art. 16); restriction of processing (Art. 18); data portability (Art. 20); and the right to object to processing (Art. 21). If you are an EU/EEA resident, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence. A list of EU supervisory authorities is available at edpb.europa.eu.

8. Cookies

This site does not use tracking cookies or advertising pixels. We use browser localStorage solely to pass your form data to the document generation page after payment. This data is deleted automatically after your document is generated.

9. Contact

For any privacy-related questions or requests, contact us at euaiactdocs@gmail.com.