Dossiq is operated by Criterion Digital LLC, a company registered in the United States. We provide a personal document management system that helps you organize, classify, and act on your documents.
Contact: privacy@dossiq.app
Websites: dossiq.app, dossiq.io, dossiq.se
When you use Dossiq, we process the following categories of personal data:
If you consent to AI document analysis, the text extracted from your documents is sent to our AI provider (Anthropic, see Section 5) for classification and data extraction. The AI may extract:
Some documents you upload may contain health information such as medical bills, insurance Explanations of Benefits (EOBs), lab results, or prescriptions. This is considered special category data under GDPR Article 9 and requires your explicit, separate consent before AI processing.
Documents you upload may contain personal data about other people — family members' names, healthcare providers, employers, etc. By uploading these documents, you confirm that you have a lawful basis for sharing this information with Dossiq (for example, it relates to your own records or you have the relevant person's permission).
Contract performance (GDPR Art. 6(1)(b)): Account creation, document storage, OCR extraction — these are necessary to provide the service you signed up for.
Consent (GDPR Art. 6(1)(a)): AI document analysis and classification. You choose whether to enable this during registration or when uploading your first document. You can withdraw consent at any time.
Explicit consent (GDPR Art. 9(2)(a)): Processing of health-related document data. This requires a separate, specific consent that you can grant or withdraw independently.
Your data is processed by the following service providers acting as data processors on our behalf:
We do not sell, rent, or share your personal data with any other third parties. We do not use your data for advertising.
Dossiq's infrastructure is hosted in the United States (Azure East US 2 region). If you are located in the EU/EEA (including Sweden), your personal data is transferred to the United States. These transfers are protected by Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.
Under GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@dossiq.app. For account deletion during the beta period, we will process your request manually within 7 days.
We take the security of your data seriously:
Dossiq uses AI to classify documents and suggest actions. However, no automated decisions with legal or significant effects are made without your explicit confirmation. Every AI-suggested action (such as creating a record or linking a document to a module) requires you to review and click "Confirm" before anything is created. You are always in control.
Dossiq is currently in closed beta. This privacy policy may be updated as the service evolves. If we make material changes that affect how your data is processed, we will notify you via email or in-app notification and, where required, request renewed consent.
For privacy-related questions or to exercise your data rights:
Email: privacy@dossiq.app
Company: Criterion Digital LLC