Privacy Policy

Draft — the legal text on this page is being finalized.

This Privacy Policy explains how mory AG processes personal data when you use the iDMS document-processing service. It is written to align with the Swiss Federal Act on Data Protection (FADP / DSG) and the EU General Data Protection Regulation (GDPR). This text is a draft pending legal review.

Data controller

mory AG, 【registered address】, Switzerland. Data-protection contact: 【email】.

What we process

(a) Account data — name, email, organisation and authentication credentials. (b) Document data — the files you upload and the metadata the AI extracts from them (classification, contacts, amounts, dates and similar fields). (c) Usage data — log and request data needed to operate, secure and improve the service.

Where your data is stored (data residency)

Your documents and their extracted metadata are stored exclusively in Switzerland (Zürich region). We use a small number of vetted sub-processors to operate the service, as described below. 【Processing locations — confirm with counsel】

Legal bases

We process personal data to perform our contract with you (GDPR Art. 6(1)(b)), to meet legal obligations (Art. 6(1)(c)) and on the basis of our legitimate interest in operating and securing the service (Art. 6(1)(f)); the corresponding bases under the Swiss FADP apply. 【Confirm with counsel】.

AI processing

Uploaded documents are processed by an automated AI service to extract and classify their contents. Document content is used only to provide the service and is not used to train third-party models. 【Sub-processor and processing location identified in the Data Processing Agreement — confirm with counsel】.

Retention and deletion

We retain account data for the life of your account and document data according to the retention policy your organisation configures. You can delete documents at any time, and we delete your data on request or on account closure within 【period】. 【Confirm retention periods】.

Your rights

You have the right to access, rectify, erase, restrict and port your personal data, and to object to certain processing. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority. To exercise these rights, contact 【email】.

Sub-processors

We use a small number of vetted sub-processors for hosting and storage, application hosting, AI document processing, error monitoring and transactional email. A current list naming each provider, its role and processing location is available in our Data Processing Agreement on request. 【Confirm DPA and whether names are published here】.

Cookies

See our Cookie Notice for details on cookies and browser storage.

Changes

We will update this policy as the service evolves and post the new version here with a revised last-updated date.