This is a machine translation for convenience. The legally binding version is the German original.

Privacy policy

Protecting your personal data matters to us. This notice informs you pursuant to Art. 13/14 GDPR about the processing of your data when using YAFF.

1. Controller

[Responsible entity — see the legal notice].

2. Which data we process

Account data (email, name).

Form data you store in your vault (e.g. name, address, bank details, tax ID). This is stored encrypted (AES-256-GCM).

Usage and billing data.

3. AI-assisted filling (processing on our behalf)

To automatically map and fill form fields, necessary data is transmitted to our AI provider (a processor located in the EU). The legal basis is your consent (Art. 6(1)(a) GDPR) and performance of the contract (lit. b). A data-processing agreement (DPA) is in place. You may withdraw your consent at any time.

4. Hosting & storage location

Processing takes place on servers within the European Union.

5. Your rights

Access, rectification, erasure, restriction, data portability and objection. You can export or delete your data in your account at any time.

6. Retention period

Vault data is kept until you delete it. Rendered, filled PDFs are retained only temporarily.