Privacy Policy

Last updated: May 2025

1. Who We Are

EuroGuard AI ("we", "us") is a compliance SaaS platform. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data We Collect

Account data: email address, business name, country, website URL
Usage data: scan results, generated documents, chat messages
Billing data: subscription plan, payment method (processed by Stripe — we do not store card details)

3. Legal Basis for Processing

Contract performance (Art. 6(1)(b) GDPR) — to provide the Service
Legitimate interests (Art. 6(1)(f) GDPR) — to improve the Service and prevent abuse
Consent (Art. 6(1)(a) GDPR) — for email communications where required

4. How We Use Your Data

To provide and improve the EuroGuard AI platform
To send compliance alerts and account notifications
To process payments via Stripe
To comply with legal obligations

5. Data Storage

Your data is stored on Supabase infrastructure located in the European Union. We do not transfer your personal data outside the EEA.

6. Third-Party Processors

Supabase — database hosting (EU region)
Stripe — payment processing
Resend — transactional email delivery
Anthropic — AI model provider (data sent to generate responses)

7. Your Rights

Under GDPR, you have the right to: access your data, correct inaccurate data, request deletion, restrict or object to processing, and data portability. To exercise these rights, contact us at privacy@euroguard-ai.com.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your personal data is removed within 30 days, except where retention is required by law.

9. Cookies

We use only essential session cookies required for authentication. No tracking or advertising cookies are used.

10. Contact & DPO

For privacy-related requests or complaints, contact us at privacy@euroguard-ai.com. You also have the right to lodge a complaint with your national data protection authority.