Privacy Policy
Last updated: 8/12/2026
1. Controller
The data controller under GDPR is Ziller Beteiligungs UG (haftungsbeschränkt), Oppelner Str. 37, 10997 Berlin, Germany ("we"). Contact for privacy matters: kontakt@blackline-documents.com.
2. Document processing
Uploaded documents are processed exclusively in the user’s browser (rendering, OCR, redacted PDF generation). Document files are not transferred to our servers and are not stored persistently. Only the extracted text is sent to a third-party AI gateway for detection of sensitive data.
3. Third-party services and recipients
We use carefully selected processors and recipients: Lovable AI Gateway (AI detection), Supabase / Cloudflare (hosting, authentication, storage) and Paddle.com Market Ltd. as Merchant of Record for sale of the product, subscription management, payments, invoicing and tax compliance. Further recipients include professional advisers (legal, tax) and authorities where required by law.
4. Cookies and tracking
This site does not use marketing cookies. Technically required local storage entries (e.g. language preference) are kept in the browser only.
5. Server log files
When the site is accessed, the hosting provider processes log data (IP address, timestamp, user agent) to ensure secure operation. This data is not combined with other data.
6. Account and payment data
For paid plans, account and billing data are processed (email, name, billing address). The actual payment processing, including collection of payment details, is handled by Paddle.com Market Ltd. as Merchant of Record under their own privacy policy.
7. Legal bases
Processing is based on Art. 6(1)(b) GDPR (contract performance — account, subscription, support), Art. 6(1)(f) GDPR (legitimate interests — secure operation, fraud prevention, product improvement) and Art. 6(1)(c) GDPR (legal obligations, e.g. tax retention).
8. Retention
Uploaded documents are discarded when the browser session ends. Account and billing data are retained as long as required for contract performance or by statutory retention obligations.
9. Your rights
Users have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Requests can be sent to kontakt@blackline-documents.com.
10. Right to complain and international transfers
You have the right to lodge a complaint with a data protection supervisory authority. Where data is processed outside the EEA (e.g. by sub-processors of our providers), we rely on EU Standard Contractual Clauses or adequacy decisions.
11. Security
We apply appropriate technical and organisational measures, in particular TLS transport encryption, access controls and least-privilege roles.