Privacy policy

Who is responsible

The controller of your personal data is ARTEXE, s. r. o., Orechová 2963/115, 900 42 Dunajská Lužná, Slovakia, company ID (IČO) 46 841 563, registered in the Commercial Register of the Bratislava III Municipal Court, section Sro, file no. 84138/B.

Contact for privacy matters: info@artexe.sk or the postal address above. We have not appointed a data protection officer because the law does not require one for our activities.

Text and names you enter into the tool

When you click Rewrite, we send your text (up to 500 characters), the type of recipient and the channel you choose, and any names you enter to Anthropic, PBC (USA), which runs the Claude AI model that writes the suggestions. A second request sends only the AI-generated suggestions, not your text, to the same model to check them for offensive content.

Purpose and legal basis: providing the service you ask for (Article 6(1)(b) GDPR).

We do not store your text, the names or the suggestions, and we do not write them to our logs. Anthropic processes them as our processor under a data processing agreement and may not use them to train its models. It deletes them within 30 days; if its automated safety systems flag a request as a possible breach of its usage policy, it may keep it for up to 2 years.

Messages you paste to decode. When you use “Decode a message I got”, you send us a message someone else wrote to you (up to 1,500 characters), the type of sender, the channel you will reply in and the kind of answer you choose. Before it leaves your browser, we replace email addresses, phone numbers, links, account numbers and names in the greeting and sign-off with placeholders such as [email]; our server does the same again. The message can still contain personal data of its author, so please replace names with roles and leave out anything sensitive. We send it to Anthropic only to explain it and suggest replies, and handle it exactly like your own text: we don't store it or write it to our logs, and the second request checks only the AI-generated explanation and replies, not the message. We process the author's data on the basis of our and your legitimate interest in helping you understand and answer a work message (Article 6(1)(f) GDPR). Because we keep nothing and cannot know who the author is, we cannot inform them individually (Article 14(5)(b) GDPR).

Please do not enter sensitive information, such as details about someone's health, or more information about other people than the message needs.

Abuse protection

To protect the tool from automated abuse and keep its costs under control, we use:

• a request counter per visitor: we store a one-way fingerprint made from your IP address and the current date (not the IP address itself) at Upstash, Inc. (USA). The fingerprint changes every day and is deleted automatically within 24 hours;
• Vercel BotID, which checks in the background that requests to the tool come from a real browser. For this check it may store security cookies or similar technical data in your browser that are strictly necessary for protecting the service;
• rate limiting in Vercel's firewall based on your IP address.

Legal basis: our legitimate interest in keeping the service secure and available (Article 6(1)(f) GDPR).

Hosting and technical logs

The website runs on Vercel Inc. (USA). When you visit it, Vercel processes technical data such as your IP address, browser type, the page requested and the time of the request in order to deliver the page and protect the service, and keeps these logs for a limited time under its retention rules. Our own application logs contain no text or names you enter and no IP addresses, only outcomes, counts, timings and error codes.

Legal basis: our legitimate interest in operating and securing the website (Article 6(1)(f) GDPR).

Measurement

We use Vercel Web Analytics to count visits and a few anonymous events: that the tools were used (and for which type of recipient or sender and channel, such as “boss, email”), which tool tab was opened, which suggestion was copied and that an error occurred. The events never record the tone or content of a message you decode. It works without cookies: visits are counted using a hash of the request that is discarded after 24 hours, and we only see aggregated statistics. The events never contain your text or names.

Legal basis: our legitimate interest in understanding how the service is used so that we can improve it (Article 6(1)(f) GDPR).

Cookies

Diplomately does not use advertising, analytics or tracking cookies, so it does not show a cookie banner. The only data stored in your browser is the technical security data described under Abuse protection, which is strictly necessary for the tool to work safely.

Who receives your data

We use these service providers, each acting as our processor under a data processing agreement:

• Anthropic, PBC (USA) — writing and checking the suggestions;
• Vercel Inc. (USA) — hosting, security (BotID, firewall) and visit statistics;
• Upstash, Inc. (USA) — the request counter.

We do not sell your data and do not share it for advertising.

Transfers outside the EU

Anthropic, Vercel and Upstash are based in the USA and process data there. These transfers are covered by the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), which form part of their data processing agreements.

How long we keep data

• Text, names, messages you paste to decode and suggestions: not stored by us; Anthropic deletes them within 30 days (up to 2 years if flagged by its safety systems).
• Daily IP fingerprint for request counting: up to 24 hours.
• Visit statistics: aggregated, without personal data; the request hash is discarded after 24 hours.
• Emails you send us: as long as needed to deal with your request, unless the law requires us to keep them longer.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interest. Because we do not store your text or link it to you, we usually cannot find or provide it once your request has been processed.

To exercise your rights, write to info@artexe.sk. We will reply within one month.

You can also lodge a complaint with a data protection authority, in particular in the EU country where you live or work. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk.

Automated decisions and children

The AI only suggests wording. It does not make decisions about you that have legal or similarly significant effects, and we do not profile you.

Diplomately is not intended for children under 16.

Changes

We update this policy when the service changes. The date of the last update is shown at the top of the page.