Privacy & DSGVO
Your data, explained in plain language.
Not the legal document — the short version. What we store, how long we keep it, what rights you have, and where everything lives.
What we store
A short, deliberate list — nothing more.
Four categories of data, each with a clear purpose.
Account & identity
Name, work email, tenant membership, and role — so access follows people.
Your customer data
The documents, spreadsheets, and connected sources you upload — this is what DARA answers from.
Usage data
Queries, token counts, and feature usage, used for metering and improving the product.
Contact-form submissions
Name, email, company, and message — only when you choose to reach out.
Where your data lives
Your data doesn't leave the EU to get an answer.
Not just storage — the whole pipeline.
- Storage, retrieval, and model inference all run on EU-region infrastructure, end to end.
- We don't route any part of the core product through non-EU infrastructure to save a step.
- Where a sub-processor requires a transfer outside the EU/EEA, we rely on Standard Contractual Clauses or an equivalent safeguard.
How long we keep it
Retention with a reason, not a default.
Nothing sits around indefinitely just because storage is cheap.
- Your data is retained for the duration of your subscription — no longer than the relationship itself.
- After termination, it's deleted or returned within a reasonable period, per the retention terms in your order form.
- Audit logs are the one exception: kept append-only, for as long as our security and compliance obligations require.
We never train models on your data.
Not an opt-out you have to remember. A default you can't accidentally undo.
Your customer data is never used to train foundation models — for our benefit or any third party's. This is an architectural and contractual commitment, built into how the product works, not a checkbox in a settings page.
Your rights
Four rights, all of them real.
Subject to applicable law, here's what you can ask for and how it actually works.
Access
See the personal data we hold about you, on request.
Correct
Ask us to fix inaccurate data wherever it lives.
Erase
Right-to-erasure is technically real: a request removes data from every layer, including search indexes — not a soft-delete flag.
Export
Take a full, portable copy of your tenant's data at any time you choose.
Enterprise customers can exercise export and erasure directly from the product's data & privacy settings. Individual requests go through our contact page.
Privacy FAQ
Questions people actually ask us.
Have a data-protection question we haven't answered?
Our team will walk you through exactly how your data is handled.