Privacy Policy
Last updated: 11 November 2026. Please read this information carefully.
1. Controller
The controller responsible for personal data processing is Uchechi Nzerem, operator of DOITENIT, Kalvarienbergstraße 78, 87509 Immenstadt, Germany. Contact for privacy requests: info@doitenit.com.
2. Data we process
Depending on how you use DOITENIT, we process account details (name/display name, email address and password hash), login and session data, information about your matters and life situations, household profiles, tasks, notes, dates, activity history and subscription information. If you use the withdrawal function, we also process your name, contract reference, confirmation email address and the date and time of submission. If you use the contact form, we process your name, email address, subject, message and submission time so we can respond to your enquiry. Contact messages are stored in a restricted owner inbox and retained only as long as needed to handle the enquiry and meet applicable legal obligations. If you upload documents, we also process the file name, type, size and contents.
3. Purposes and legal bases
We use data to provide and secure your account, save your matters and tasks, perform document features you request, administer subscriptions and meet legal obligations. The principal legal bases are Article 6(1)(b) GDPR (contract or steps before a contract), Article 6(1)(c) GDPR (legal obligations) and, where applicable, Article 6(1)(f) GDPR (security, abuse prevention and service operation). Where an optional feature requires consent, we rely on Article 6(1)(a) GDPR; you may withdraw consent at any time for the future.
4. Documents and digital assistance
If you upload a supported administrative document and request an explanation, it is processed to provide you with a clear summary and possible next steps. The summary is attached to your matter. Please upload only documents needed for that matter. For your security, do not upload passwords, identity documents, medical records, bank statements, payment cards or complete tax returns. Automatically generated guidance is provided for information and should be checked against the original document.
5. Recipients and service providers
DOITENIT runs on the Floot, Inc. platform. Floot processes end-user data as a technical processor. The application infrastructure and file storage are provided through Amazon Web Services (AWS), and the application database is hosted by Neon (Databricks, Inc.). When you request a document explanation, the document content is sent through Floot AI to OpenAI for model processing. The request is sent with storage disabled; OpenAI states that application data is not used for model training and that abuse-monitoring logs may be retained for up to 30 days. Stripe processes payments and subscriptions and may act as an independent controller for some processing. DOITENIT's built-in visitor analytics are disabled, so no visitor analytics events are sent to the analytics provider. Each provider receives data only to the extent needed for its service.
6. International transfers
According to the platform providers, the application database, application files and backend infrastructure are processed in the United States, including AWS us-east-1. The content delivery network may cache public content worldwide. OpenAI processes document requests in an environment that is not pinned to a specific region; Stripe processes payment data in the United States. Personal data may therefore be transferred to countries outside the European Economic Area. Before launch, the operator must verify and document the safeguards required by Articles 44 et seq. GDPR, including applicable Standard Contractual Clauses and the processor arrangements with Floot, against the contracts actually accepted.
7. Retention and deletion
Account details, matters, tasks and household information remain stored while your account exists and the data is needed to provide the service. You can delete individual matters and documents in your account; to request deletion of your account or exercise other privacy rights, contact info@doitenit.com. Withdrawal declarations and receipt records are retained only as long as necessary to document and handle the withdrawal and meet applicable legal retention duties. Statutory retention duties for billing and tax records remain unaffected. The database platform keeps a seven-day recovery history; according to the platform documentation, files in Floot Storage have no file version history or backup. Platform and application logs may be retained for up to 90 days. OpenAI may retain abuse-monitoring logs for up to 30 days. Actual deletion by each provider is also governed by its applicable contractual and retention terms.
8. Your rights
Subject to legal conditions, you may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing. You may withdraw consent at any time for the future. Contact the privacy address listed above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular where you live, work or where an alleged infringement took place.
9. Security
Protecting your personal information is a priority for us. We use technical and organisational security measures designed to protect your information and files against unauthorised access, loss and misuse. We regularly review and improve these measures. You can help keep your account safe too: choose a strong, unique password, keep your sign-in details confidential and upload only information needed for your matter. Sign out when using a shared device, and contact us at info@doitenit.com if you notice anything unusual about your account.
10. Changes
We may update this notice when the service, data processing or legal requirements change. The current version and its update date will be published on this page.