Doxwell
EN DE UA

Privacy

Privacy Policy

Covers this website only (doxwell.ai). Privacy of the Doxwell software you run on your own hardware is described in the in-app privacy notice and the user guide. The German version at /de/datenschutz is the legally binding text.

1. Controller

The controller responsible for processing per Art. 4(7) GDPR is the operator listed in the legal notice: L-Lopa UG (haftungsbeschränkt), Wilmersdorfer Straße 122–123, 10627 Berlin, Germany. Contact info@l-lopa.de.

2. What this website collects

We try to collect the absolute minimum. Concretely:

  • Server access logs — our hosting provider (Cloudflare) records the IP address, requested URL, HTTP status, timestamp, and user agent of each request. These logs are used for security, abuse prevention, and aggregate traffic statistics. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
  • Web fonts — pages load the Inter and Fraunces typefaces from Google's CDN (fonts.googleapis.com, fonts.gstatic.com). Your IP address is transmitted to Google in this process. Legal basis: Art. 6(1)(f) GDPR. Google may transfer data to the United States; an EU-U.S. Data Privacy Framework adequacy decision applies.
  • No cookies, no tracking, no analytics are set by this site at this time. If we add analytics (we are evaluating Plausible) or A/B testing (we are evaluating GrowthBook), we will update this notice and, where required, ask for your consent before any cookies are set.

3. Personal data processed via this website (Art. 13 GDPR)

The following data flows involve personal data in addition to the server access logs described above.

Email sign-up (POST /api/signup)

Data collected
Email address, locale preference, OS hint (from browser user-agent)
Purpose
Launch notifications and, in future, per-user binary signing
Legal basis
Art. 6(1)(a) GDPR — your explicit consent at time of sign-up
Retention
Until you withdraw consent. To unsubscribe: click the link in any email we send, or write to pavel.a.gurevich@gmail.com.
Recipient
Controller only (L-Lopa UG — see §1 above). No third-party email processor is used at this time.

Doxwell telemetry (POST /api/telemetry)

This endpoint is called by the Doxwell application (not by your browser). It receives a random install ID, version, OS, startup timestamp, and a country code derived from IP at receive time. Raw IP addresses are not stored. Full disclosure: Telemetry policy.

Legal basis
Art. 6(1)(f) GDPR — legitimate interest in counting active installs
Opt-out
Set telemetry.enabled = false in ~/.config/doxwell/config.toml

Server location

Both endpoints run on a Proxmox VPS hosted in Germany (EU). No personal data is transferred outside the European Union for these processing activities.

4. Processors and recipients

  • Cloudflare, Inc. — hosting and content delivery for doxwell.ai (static site on Cloudflare Pages). Standard contractual clauses apply for international transfers.
  • Google LLC — Google Fonts CDN (see above).

5. Retention

  • Server access logs: retained as configured by Cloudflare (typically a few days), then deleted.

6. Doxwell software (beta)

The Doxwell software you download from this site is currently in beta. We strongly recommend that you keep independent backups of your documents. Like all software it can contain bugs. We take reasonable precautions to prevent data loss, corruption, and unintended modifications, but we cannot guarantee against every failure mode. Please refer to the in-app End-User License Agreement for the full liability and warranty terms that apply to the software itself.

The Doxwell software is designed to run on your own hardware. Your documents and the database derived from them stay on your machine. Where you choose to enable an external AI provider, requests are sent to that provider on your behalf using credentials you supply; that processing is governed by the provider's terms, not by this notice.

7. Your rights

Under Articles 15 to 22 GDPR you have the right to: (a) access information we hold about you, (b) correct inaccurate data, (c) request deletion, (d) restrict processing, (e) data portability, (f) object to processing based on legitimate interest, and (g) withdraw any consent you have given (without affecting the lawfulness of processing carried out before withdrawal).

To exercise any of these rights, email info@l-lopa.de.

You also have the right to lodge a complaint with a supervisory authority — for example the data-protection authority of your federal state in Germany.

8. Changes

We will update this notice when our processing changes (for example, when analytics are introduced or when we start collecting a download email address). The date below shows when this version was published.

Last updated: 2026-04-23