Privacy Policy

Information on Data Protection at Docufast

Last updated: June 2026

Table of Contents

1. Data Protection at a Glance

2. Hosting

3. General Information and Mandatory Disclosures

4. Data Collection on This Website and in the Product

5. Analytics Tools

6. Plugins and Tools

7. Overview of Processors

1. Data Protection at a Glance

General Notes

The following notes provide a simple overview of what happens to your personal data when you visit this website or use our application. Personal data is any data that can be used to personally identify you. Detailed information can be found in the privacy policy set out below.

Data Collection on This Website and in the Product

Who is responsible for data collection?

Data processing is carried out by the operator: Docufast Technologies Ltd, 11–13 Georgiou Karaiskaki Street, Carisa Salonica Court, Office 102, 7560 Perivolia, Larnaca, Cyprus. Contact details can be found in Section 3.

How do we collect your data?

Your data is collected, on the one hand, from information you provide to us — for example, during account registration, when booking a demo, or when making a contact inquiry. Other data is collected automatically, or with your consent, by our IT systems when you visit the website (e.g., browser, operating system, time of access). When using the product, we also process the content you create (screen recordings, guides).

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website and the application. Other data is used to provide our services (e.g., AI-powered creation of guides) and, subject to your consent, to analyze user behavior.

What rights do you have regarding your data?

You have the right, at any time, to obtain free information about the origin, recipients, and purpose of your stored personal data, as well as a right to rectification or erasure. Consent you have given may be withdrawn at any time with effect for the future. Under certain circumstances, you may request that processing be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

Website (docufast.ai)

Our public website is delivered via the website platform Framer.

Provider: Framer B.V., Rokin 75, 1012 KL Amsterdam, Netherlands.

When you access the website, technical access data (e.g., IP address, browser type, operating system, time of access) is processed to ensure the website is delivered securely and reliably. This is done in the interest of a secure, fast, and efficient provision of our online offering (Art. 6(1)(f) GDPR). A data processing agreement (DPA) under Art. 28 GDPR is in place with the provider. To the extent processing takes place outside the EU, it is carried out on the basis of appropriate safeguards under Art. 44 et seq. GDPR (in particular, EU Standard Contractual Clauses).

Application and Content (Web App / Browser Extension)

The application itself, as well as the content you create (screen recordings, guides, workspace data), is stored separately from the website on infrastructure located in the European Union.

Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

This is done for the purpose of performing our contract with prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure and efficient service provision (Art. 6(1)(f) GDPR). We have entered into a data processing agreement (DPA).

3. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Controller

The controller responsible for data processing is:

Docufast Technologies Ltd 11–13 Georgiou Karaiskaki Street Carisa Salonica Court, Office 102 7560 Perivolia, Larnaca, Cyprus

Represented by the Managing Director: Brian Annan

Phone: +49 159 01226854

Email: [email protected]

Registration number: HE 488300 (Register of Companies and Intellectual Property, Cyprus)

VAT ID: CY60336171H

Data Protection Officer

A Data Protection Officer is not currently legally required to be appointed. For all data protection inquiries, please contact us at [email protected].

Storage Period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a valid request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for storing it (e.g., statutory retention obligations).

SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address bar changes from "http://" to "https://" and by the lock icon in your browser bar.

Your Rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent (Art. 7(3) GDPR)

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

4. Data Collection on This Website and in the Product

Cookies

Our website uses so-called "cookies." Cookies are small data packages and cause no damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR and/or Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). For all other cookies, we obtain your consent via a cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version

• Operating system used

• Referrer URL

• Host name of the accessing computer

• Time of the server request

• IP address

This data is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and security of the website.

Registration and User Account

Use of the application requires a user account. We process name, email address, authentication data, and, where applicable, company name and role. Authentication is provided by the service provider Clerk, Inc. (USA). The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

Content Data (Recordings and Workspace Content)

Docufast automatically converts screen recordings into step-by-step guides, AI-narrated videos, and interactive walkthroughs. During creation, we process your screen recordings, screenshots, text input, and the outputs generated from them. These may contain personal data if you record such data. The legal basis is Art. 6(1)(b) GDPR.

Note for users: Please ensure that you do not record third parties' personal data without a legal basis when making screen recordings. You are solely responsible for the content you create; in this respect, Docufast acts as a processor on your behalf.

AI-Assisted Processing

To automatically generate step descriptions and voice narration, content is transmitted to AI services. We primarily use EU-hosted AI infrastructure (Google Vertex AI for text, Azure OpenAI for voice output). Input data is not used to train the underlying models. AI-generated outputs are labeled in accordance with Art. 50 of the EU AI Act. The legal basis is Art. 6(1)(b) GDPR.

Browser Extension

The browser extension collects data only during an active recording session that you initiate yourself. There is no ongoing background monitoring of browser activity. The legal basis is Art. 6(1)(b) GDPR.

Payment Processing

For paid subscriptions, we use the payment service provider Stripe (Stripe Payments Europe, Ltd., Ireland). Payment data is transmitted directly to Stripe; we do not receive complete credit card data. The legal basis is Art. 6(1)(b) GDPR.

Contact and Demo Booking

If you contact us or schedule a demo appointment via our booking tool (Calendly), we process the data you provide in order to handle your request. Processing is based on Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures; in all other cases, on Art. 6(1)(f) GDPR. Provider: Calendly LLC (USA).

Transactional Emails and Newsletter

For system and transactional emails, we use the service provider Brevo (Sendinblue GmbH). To the extent we send you a newsletter, this is done only on the basis of your consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time.

5. Analytics Tools

The following analytics tools are used exclusively on the basis of your consent given via our cookie banner. You may withdraw your consent at any time with effect for the future.

Google Analytics

This website uses the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics allows us to analyze the behavior of website visitors, such as which pages are visited and how users interact with the website. This includes processing device and browser information as well as a pseudonymous identifier.

Use is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. To the extent data is transferred to the USA, this is done on the basis of appropriate safeguards (EU Standard Contractual Clauses). A data processing agreement has been concluded with Google.

Mixpanel

To analyze usage of our application, we use Mixpanel, a product analytics tool provided by Mixpanel, Inc., One Front Street, 28th Floor, San Francisco, CA 94111, USA. Mixpanel collects information about interactions with our application, such as triggered events (e.g., guides created, features used), device information, and a pseudonymous user identifier. This data helps us improve the product and understand usage patterns.

Use is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. To the extent data is transferred to the USA, this is done on the basis of appropriate safeguards (EU Standard Contractual Clauses). A data processing agreement (DPA) has been concluded with Mixpanel. Further information can be found in Mixpanel's privacy policy: https://mixpanel.com/legal/privacy-policy/.

6. Plugins and Tools

Meta Pixel (Facebook Pixel)

This website uses the visitor action pixel provided by Meta (Meta Pixel). The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Meta Pixel allows us to track the behavior of visitors after they have been redirected to our website by clicking on a Meta advertisement. This allows us to evaluate the effectiveness of our advertisements and optimize future advertising. We are unable to attribute the collected data to individual users; it is stored and processed by Meta.

Use is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. To the extent data is transferred to the USA via the pixel, this is done on the basis of appropriate safeguards (EU Standard Contractual Clauses). Meta is, in part, jointly responsible for data processing together with us (Art. 26 GDPR); a joint controller agreement is in place in this respect. Further information can be found in Meta's data policy: https://www.facebook.com/privacy/policy/.

Marketing Cookies / UTM Parameters

If you access our website via a link containing campaign parameters (e.g., utm_source, utm_medium, utm_campaign, gclid, fbclid, li_fat_id), we may store these values in first-party cookies in order to later attribute a conversion to its original marketing source. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

7. Overview of Processors

We work with carefully selected service providers with whom data processing agreements under Art. 28 GDPR are in place. To the extent service providers are located in a third country, transfer takes place only on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR (in particular, EU Standard Contractual Clauses).

Tools used exclusively for our own sales and marketing outreach that do not process data from visitors to this website (e.g., Instantly, Expandi, Apollo, Clay) are documented in our internal Record of Processing Activities (RoPA).

Currency and Amendments to This Privacy Policy

This privacy policy is dated June 2026. Further development of our application or changes in legal requirements may make an update necessary. The current version is always available on this website.