This data protection notice has been prepared to inform you about the processing of your personal data by ISODraft in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Data Controller
The data controller for your personal data is ISODraft.
Contact: [email protected]
2. Personal Data We Process
The following personal data is processed through our platform:
- Identity data: First name, last name
- Contact data: Email address
- Document data: Documents uploaded via the audit module (PDF, DOCX, DOC)
- Technical data: IP address, session information, log records
3. Purposes of Processing
Your personal data is processed for the following purposes:
- Providing document generation and audit services
- Responding to contact requests
- Ensuring platform security
- Improving service quality
- Fulfilling legal obligations
4. Data Transfers
Your personal data may be transferred to the following parties for the purpose of providing our services:
- Anthropic (Claude API): Document contents uploaded in the audit module are transmitted to Anthropic servers for AI analysis. Uploaded documents are processed solely for audit purposes and are not used for model training.
- Payment service providers: For processing payment transactions
- Legal authorities: To competent public authorities when required by law
5. Data Retention Period
Your personal data is retained for the duration required by processing purposes:
- Audit documents: Not permanently stored on servers after the process is completed
- Contact information: For as long as the account is active or for the duration of legal retention periods
- Log records: For the duration required by applicable legislation
6. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right not to be subject to automated decision-making
- Right to lodge a complaint with a supervisory authority
7. How to Exercise Your Rights
You can submit your requests regarding the rights listed above via the following contact address:
Email: [email protected]
Your request will be processed free of charge within 30 days at the latest.
Last updated: April 2026