Legal & Compliance

All HexRead legal documents in one place - and how we prove our central privacy commitment.

Documents

• Legal Notice - Provider identification under §5 DDG (German Digital Services Act).
• Privacy Policy - How we process data (Art. 13/14 GDPR) + our zero-retention promise + cookie notice.
• Terms of Service - General terms and conditions (B2C/B2B).
• Withdrawal Notice - Consumer right of withdrawal + model withdrawal form.
• Cancel subscription - Cancel your subscription - the § 312k BGB cancellation button, no login required.
• Service providers - Service providers and recipients we share data with to run the service.

Data sovereignty (EU-only)

HexRead processes documents entirely within the EU: all document processing happens on Scaleway infrastructure in France. There is no third-country processing of document content; third-country transfers exist only outside the document path (payment processing - see the privacy policy).

We operate HexRead in accordance with the GDPR: the privacy policy documents every processing activity with its purpose, legal basis and retention period.

Evidence

The central privacy feature is our zero-retention promise: your documents are not stored. We continuously verify the individual properties of this commitment with automated tests against the production system. The properties and the single deliberate exception (statutory retention of inbound invoices) are documented in the privacy policy, section 1.