Privacy Policy

1. Introduction

We value your trust and are committed to protecting your personal data. This privacy policy explains what data we collect, how we use it, and what rights you have.

2. What Data We Collect

3. How We Use Data

We use your personal data exclusively for:

• • Generating legal letters according to your requirements
• • Delivering generated letters to your email
• • Communication regarding your order
• • Sending at most two reminders if you do not complete an order you started (you can opt out in every message)
• • Sending occasional tips and news about similar services to our customers (you can opt out at any time)
• • Compliance with legal obligations

4. Data Protection

Your data is stored securely on encrypted servers. We use state-of-the-art security technologies to protect your personal data from unauthorized access.

5. Data Sharing

We do not share your personal data with third parties, except in necessary cases such as payment processing through Stripe, email delivery or letter generation, or compliance with legal requirements.

To generate the letter we use the following artificial-intelligence sub-processors:

• • OpenAI, L.L.C. (USA) — used by default — Data Processing Addendum (DPA)
• • Anthropic, PBC (USA) — if you select it — Data Processing Addendum (DPA)

Transfer to the USA is based on the EU Standard Contractual Clauses. The issue description you enter is sent to the selected provider solely to generate the letter.

6. Uploaded Documents

If you upload a document to your case (e.g. a decision, a fine, or a notice), we use it solely to build your reply. The same artificial-intelligence sub-processor listed above automatically summarises the document for you — it extracts the key facts (e.g. issuing authority, case reference, amount, deadline) that help generate the letter. This summary is only a basis; you always approve the final letter, so this is not an automated decision. We keep the original uploaded file for at most 90 days after the case is closed and then delete it; the extracted summary is part of your case data and is erased together with the case. You always have the right to access this data and to have it erased.

7. Your Rights

Under GDPR, you have the following rights:

• • Right to access your personal data
• • Right to correct inaccurate data
• • Right to erasure (right to be forgotten)
• • Right to data portability
• • Right to object to processing

8. Cookies

We use only essential cookies for website functionality. You can disable them at any time in your browser settings.

9. Contact

The data controller is Hey Wox s.r.o., Company ID (IČO) 10866957, with its registered office at Veslařská 563/197, Pisárky, 637 00 Brno, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno, Section C, Insert 123208.

If you have questions about privacy protection, contact us: