Privacy Policy

Last updated: 22 March 2026

1. Controller

Eriskhan Abdulkhamidov
Adelheid-Popp-Gasse 14/1/12, 1220 Wien, Austria
Email: contact@gorec.io

2. Data We Collect

  • PDF Files: Uploaded for analysis, processed in memory, immediately discarded. Never stored on our servers.
  • Analysis Results: Cached temporarily (up to 7 days) using a cryptographic hash of the PDF. The original PDF cannot be reconstructed from the cache.
  • Usage Analytics: We use Vercel Analytics which collects anonymous page view data. No cookies are used. No personal data is collected.
  • Email Address: Only if you voluntarily subscribe to our newsletter. Stored until you unsubscribe.
  • IP Address: Temporarily processed for rate limiting (10 requests/hour). Stored as a counter in Redis, automatically deleted after 1 hour.

3. Legal Basis (Art. 6 GDPR)

  • Analytics: Legitimate interest (Art. 6(1)(f))
  • Email: Consent (Art. 6(1)(a))
  • Rate limiting: Legitimate interest (Art. 6(1)(f))

4. Third-Party Services

  • Anthropic (Claude AI): PDF content is sent to Anthropic's API for analysis. See Anthropic's privacy policy.
  • Vercel: Hosting and analytics. See Vercel's privacy policy.
  • Upstash: Redis for rate limiting and caching. See Upstash's privacy policy.
  • Stripe: Payment processing (when activated). See Stripe's privacy policy.

5. Data Retention

  • PDF files: Immediately deleted after analysis (not stored)
  • Analysis cache: Automatically deleted after 7 days
  • Rate limit data: Automatically deleted after 1 hour
  • Email addresses: Until you unsubscribe
  • Analytics: Aggregated, no personal data retained

6. Your Rights (GDPR)

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, contact us at contact@gorec.io.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).

7. Cookies

We do not use cookies. Vercel Analytics is cookie-free. Theme preferences and analysis history are stored locally in your browser (localStorage / IndexedDB) and are never sent to our servers.

8. Changes

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.