Privacy policy

1. Controller

Mathias Gort, MSc, Relay Studio, Badidastraße 81, 6811 Göfis, Austria. Contact: support@relaystudio.org.

2. Uploaded statements

Statements you upload are processed only to convert them (Art. 6(1)(b) GDPR). The file is read in the memory of a server in Frankfurt am Main and discarded when the conversion finishes. Neither the file nor the transactions are stored. Export files are created in your browser.

Scanned statements without a text layer are sent to Mistral AI SAS, 15 rue des Halles, 75001 Paris, France, for text recognition (processor). Mistral processes the file only to return its text.

For each conversion we store only the time, page count and method (text or OCR), linked to your account if you are signed in, otherwise to a hash of your IP address that changes every calendar month. The purpose is counting plan pages (Art. 6(1)(b) and (f) GDPR). Entries without an account are deleted after 35 days.

3. Account

For an account we store your email address, plan, subscription status and billing period, and whether you want product news by email (consent, Art. 6(1)(a) GDPR, revocable at any time). Sign-in works with a link sent by email. The database and sign-in are run by Supabase Inc. as processor, with data held in the EU (Frankfurt).

We delete the account and its usage records within 7 days of a request to support@relaystudio.org.

4. Payments

Payments are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. We do not receive card details; we see name, email, country, plan and invoices. Invoice records are kept for 7 years (§ 132 BAO).

5. Hosting and server logs

The site runs on Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, with functions in the Frankfurt region. Vercel processes technical data on each request (IP address, time, URL, browser) to deliver and protect the site (Art. 6(1)(f) GDPR). Transfers to the US rely on the EU-US Data Privacy Framework and standard contractual clauses.

6. Cookies

Only cookies needed for sign-in are set. There are no advertising or tracking cookies.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent. Write to support@relaystudio.org. You can complain to the Austrian Data Protection Authority (dsb.gv.at).