GDPR Information
Last updated: March 2026
Dokus is fully committed to GDPR compliance. This page outlines how we handle your data in accordance with the General Data Protection Regulation.
Data controller
Dokus acts as the data controller for personal data processed through our platform. Our registered office is in Belgium.
Legal basis for processing
We process your data based on: contractual necessity (to provide the service), legitimate interest (to improve the service), and consent (for optional communications).
Data processing
Financial documents are processed to extract structured data. All processing occurs within EU-hosted infrastructure. We do not transfer data outside the EEA.
Data retention
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Financial records may be retained as required by Belgian law.
Your GDPR rights
You have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, and object to processing. To exercise any right, contact privacy@dokus.tech.
GDPR contact
For any question about how we handle your data, or to exercise your GDPR rights, email privacy@dokus.tech. We aim to respond within 30 days.