# Privacy Policy URL: https://rakenne.app/privacy/index.md Effective date: Feb 10, 2026 Rakenne ("we", "us", "our") operates the rakenne.app platform. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws. ## What Data We Collect We collect the following categories of personal data: - **Account information**: name, email address, and password hash when you register. - **Usage data**: interaction logs, feature usage, browser type, IP address, and timestamps. - **Content data**: documents and workflows you create within the platform. - **Payment data**: billing information processed through our third-party payment provider (Stripe). ## How We Use Your Data We use your data to: - Provide our services (legal basis: performance of contract). Your data is NOT used to train LLMs or for other purposes. - Authenticate your identity and secure your account (legal basis: performance of contract). - Communicate service updates, security alerts, and support messages (legal basis: performance of contract; legitimate interest). - Analyze usage patterns to improve product quality and user experience (legal basis: legitimate interest; consent where applicable for optional analytics). - Comply with legal obligations (legal basis: legal obligation). ## AI and Language Models Your content (prompts, documents, and chat) is processed by an AI model operated by a third-party provider to deliver the Service. When Rakenne supplies the API key, the provider is Anthropic, OpenAI, or Google, depending on configuration. That processing is for inference only; your data is not used to train models. **Subprocessors.** We use the following subprocessors: Google Cloud (hosting), Stripe (payments), and the LLM provider(s) used when you do not use Bring Your Own Key (Anthropic, OpenAI, or Google). Each is bound by data processing agreements and used only for the purposes stated in this policy. **Bring Your Own Key.** When you use Bring Your Own Key, the LLM provider you connect is your own processor or subprocessor. Processing of your content by that provider is governed by your agreement with them and their privacy policy. Rakenne does not control that provider's processing or data handling. ## Data Storage & Security Your data is stored on servers in the United States, using Google Cloud. We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. ## International Transfers Your data may be transferred to and processed in the United States and other countries. Where required by applicable law, we put in place appropriate safeguards (such as EU Standard Contractual Clauses or equivalent) for such transfers. A copy of the safeguards we use is available on request; contact [privacy@rakenne.app](mailto:privacy@rakenne.app). ## Third-Party Services We may share data with trusted third-party service providers for hosting, analytics, and payment processing. All third parties are bound by data processing agreements and are required to comply with GDPR. ## Sensitive and Special Category Data The Service is intended for business document workflows. If you upload personal data that reveals special categories (e.g. health, racial or ethnic origin), you are responsible for ensuring you have a valid legal basis and that your use complies with applicable law. We recommend that you do not upload unnecessary special-category or highly sensitive data. ## Children The Service is not directed at individuals under 16. We do not knowingly collect personal data from them. If you believe we have collected data from a child under 16, please contact us at [privacy@rakenne.app](mailto:privacy@rakenne.app). ## Data Retention We retain account data for as long as your account is active and for a reasonable period after closure to comply with law and resolve disputes. Usage data is retained for a limited period to operate and improve the service. Project and content data are retained while your project exists and for a limited period after you delete it. Payment-related data is retained as required for tax and legal obligations. We may retain some data longer where required by law or for legitimate purposes such as resolving disputes or enforcing our agreements. ## Your Rights Under the GDPR, you have the right to: - **Access** your personal data. - **Rectify** inaccurate or incomplete data. - **Erase** your data ("right to be forgotten"). - **Restrict** or **object to** processing. - **Data portability** — receive your data in a structured, machine-readable format. - **Withdraw consent** at any time where processing is based on consent. - **Lodge a complaint** with a supervisory authority in your country of residence or place of work. To exercise any of these rights, contact us at [privacy@rakenne.app](mailto:privacy@rakenne.app). ## US State Privacy Rights If you are a resident of California or another US state with comprehensive privacy laws, additional disclosures and rights may apply (e.g. categories of data collected, purposes, sale/sharing, and right to opt out). Those disclosures and how to exercise your rights are available on request or in a supplement; contact [privacy@rakenne.app](mailto:privacy@rakenne.app). ## Cookies We use essential cookies to operate the platform and optional analytics cookies to understand usage patterns. For details, refer to our cookie consent banner settings. ## Contact For privacy-related inquiries or concerns, please contact our Data Protection team at [privacy@rakenne.app](mailto:privacy@rakenne.app). --- Back to [](https://rakenne.app/index.md)