Legal & Privacy
Our policies regarding the use of our services and the protection of your personal data.
Terms and Conditions for the Docusearch Service
Version 1.0.0 | Last updated: March 18, 2026
1. About the Docusearch Service
1.1. Description
Docusearch is a pilot service in beta version, based on artificial intelligence, developed and operated by REEA SRL, with its registered office in Mureș County, Târgu Mureș, 41 Republicii Street, registered with the Trade Registry under no. J1998000628265, CUI RO10966500.
1.2. Purpose
Docusearch is trained to answer questions related to documents, specifically client-specific documents. In certain situations, the service may also answer general contextual questions.
1.3. Beta Status
As it is in the pilot phase, Docusearch is subject to continuous improvements. The functionality, availability, and performance of the service may vary without prior notice.
1.4. Types of Users
These Terms and Conditions apply to both:
- End Users – individuals who use the service directly; and
- Business Customers – legal entities, sole proprietorships, developers, or any other entity accessing the service for commercial, evaluation, or integration purposes.
Important Note: REEA SRL acts exclusively as a data controller within the meaning of Article 4(7) of the GDPR, determining the purposes and means of processing personal data within the Docusearch service. REEA SRL is not a contractual party as a client vis-à-vis the end users of the Docusearch service. The relationship between the user and the service is governed exclusively by these Terms and Conditions.
2. Data Processing and Privacy
2.1. Identity of the Data Controller
REEA SRL
Registered office: Mureș County, Târgu Mureș Municipality, Republicii Street, No. 41
CUI: RO10966500
Data Protection Email: dpo.in@reea.net
Data Protection Officer (DPO): Sarb Andrei-Claudiu
2.2. Processed Data
Docusearch processes the queries you submit to the service to generate responses. Technical processing is carried out via the Gemini API, a service provided by Google LLC, which acts as a data processor in accordance with GDPR requirements.
2.3. Data Location and International Transfers
Typically, data processed through the Docusearch service is stored and processed within the European Union / European Economic Area (EEA):
- REEA SRL servers are, by default, hosted within the European Union
- Gemini API (Google) processes data through European endpoints
Exception regarding international transfers:
Depending on operational needs or specific requirements, the servers running the Docusearch service may be migrated to infrastructures located in the United States (US) or Canada. In the event of such an international data transfer outside the EEA, REEA SRL undertakes to ensure an adequate level of data protection by using one of the mechanisms provided for by the GDPR, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Other appropriate safeguards pursuant to Article 46 of the GDPR
Users will be notified of any significant changes regarding the location of data, in accordance with the provisions of Section 6.2 of this document.
Additional details regarding Google’s data processing policy are available at: https://policies.google.com/privacy
2.4. Legal Basis for Processing
Data processing is carried out on the following legal grounds, in accordance with Article 6 of the GDPR:
- Processing inquiries to generate responses
- Temporary technical storage of conversations (90 days)
- Use of incorrectly entered data to improve the algorithm
2.5. Local Storage in the Browser (Local Storage and Session Storage)
Local Storage
- Stores the conversation history locally in your browser to ensure session continuity
- Duration: Until manually deleted by the user or browser data is cleared
Session Storage
- Stores temporary data from the current conversation session
- Duration: Automatically deleted when the tab or browser is closed
2.6. Prohibition on Personal Data
DO NOT enter personal data, confidential, or sensitive information in conversations with Docusearch. The service is not designed to process personal data and does not provide personalized responses.
It is strictly prohibited to enter special categories of data within the meaning of Art. 9 GDPR, including, but not limited to:
- Health data
- Biometric or genetic data
- Racial or ethnic origin
- Political opinions, religious or philosophical beliefs
- Data concerning sexual life or sexual orientation
- Data regarding criminal convictions
Entering such data does not entitle you to a personalized response and may be ignored or deleted by the system.
2.7. Consent for Incorrectly Entered Data
If, despite the above prohibition, you enter personal data into Docusearch, by doing so you expressly consent to:
- The processing of this data for the purpose of generating a response
You have the right to withdraw this consent at any time, without affecting the lawfulness of the processing carried out prior to withdrawal, by contacting the operator at the contact details provided in this document.
2.8. Storage Period
The storage period varies depending on the storage level:
- REEA SRL servers: 90 days
- Gemini API (Google): in accordance with Google’s policies
- Browser local storage: until manually deleted
- Browser session storage: depending on the session duration
2.9. Automated Processing and Decision-Making
Docusearch uses automated decision-making processes to generate responses via the Gemini API (Google). Responses are generated exclusively by algorithms, based on the questions entered and the indexed content.
In accordance with Article 22 of the GDPR:
- Logic used: The system analyzes the question entered, correlates it with the article database, and generates a relevant answer using the Gemini language models provided by Google
- Consequences for the user: The answers are strictly informational and do not produce legal effects or binding decisions for the user
- Right to object: The user has the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects them
2.10. Data Security
REEA SRL implements appropriate technical and organizational measures to protect the processed data, in accordance with Art. 32 of the GDPR, including:
- Encryption of data in transit (HTTPS/TLS protocol)
- Hosting servers, by default, within the European Union
- Use of European endpoints of the Google Gemini API (where applicable)
- Access control to processing systems
- Periodic security assessments
- Automatic deletion of data upon expiration of the 90-day period
In the event of a security incident (data breach):
- ANSPDCP will be notified within a maximum of 72 hours of the incident being detected, in accordance with Article 33 of the GDPR
- Data subjects will be notified without undue delay if the incident poses a high risk to their rights and freedoms, in accordance with Article 34 of the GDPR
- The Business Customer will be notified within 72 hours in the event of an incident affecting the data provided by them
2.11. Your GDPR Rights
| Right of access (Art. 15) | You may request a copy of the processed data |
| Right to rectification (Art. 16) | You may request the correction of inaccurate data |
| Right to erasure (Art. 17) | You may request the erasure of your data (“right to be forgotten”) |
| Right to restriction (Art. 18) | You may request the restriction of processing |
| Right to data portability (Art. 20) | You may request your data in a structured, machine-readable format |
| Right to object (Art. 21) | You may object to processing based on legitimate interest |
| Withdrawal of consent (Art. 7(3)) | You may withdraw your consent at any time |
| Right not to be subject to automated decisions (Art. 22) | You may challenge decisions made solely by automated means |
Your requests will be addressed within a maximum of 30 calendar days of receipt. In complex cases, this period may be extended by an additional 60 days, with prior notification to the user, in accordance with Art. 12 GDPR.
To exercise these rights, contact us at: dpo.in@reea.net
Right to lodge a complaint with the supervisory authority:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: 28-30 General Gheorghe Magheru Blvd., Sector 1, Bucharest, 010336
Phone: +40.318.059.211
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro
2.12. Protection of Minors
The Docusearch service is not intended for persons under the age of 16. In accordance with Article 8 of the GDPR and Law No. 190/2018, the minimum age for giving consent in Romania is 16 years.
If you are a minor under the age of 16, do not use this service without the consent of a parent or legal guardian. REEA SRL does not intentionally collect data from minors and will immediately delete any data that it is informed of as belonging to minors under the age of 16.
3. Customer Content and REEA SRL’s Limitation of Liability
3.1. Definition of Customer Content
“Client Content” means any question, text, information, data, or other material transmitted by the user through the Docusearch service, including, but not limited to: queries entered into the conversation interface, uploaded files or data, as well as any other content generated or provided by the user during interaction with the service.
3.2. Responsibility for User Content
The user is solely responsible for the content they enter into the Docusearch service. REEA SRL assumes no liability for:
- The accuracy, legality, or appropriateness of the content transmitted by the user
- Any damage caused by third parties or by the user themselves as a result of the content entered
- Infringement of intellectual property rights, privacy rights, or any other rights of third parties through the content transmitted by the user
- Any legal, civil, criminal, or administrative consequences arising from the nature or content of the queries submitted by the user
By using the Docusearch service, the user warrants that they hold all necessary rights to the content entered and that it does not violate applicable law or the rights of third parties.
3.3. Right to Mediate and Manage Content-Related Complaints
In the event that REEA SRL receives a complaint from a third party regarding content uploaded by a user to the Docusearch service, REEA SRL reserves the following rights:
- The right to review the complaint and assess its validity in a reasonable and proportionate manner;
- The right to mediate between the user subject to the complaint and the complaining party, with the aim of amicably resolving the dispute;
- The right to remove or restrict access to the complained-about content if there are reasonable grounds to believe that it violates applicable law, the rights of third parties, or these Terms and Conditions — including without prior notice to the user, in urgent situations or where there is a clear risk of harm;
- The right to suspend or restrict the user’s access to the service during the investigation of the complaint;
- The right to cooperate with the competent authorities and to provide the necessary information within the framework of applicable legal proceedings.
REEA SRL will make reasonable efforts to notify the user in question regarding the complaint received and the measures taken, except in cases where such notification is prohibited by law or could compromise an ongoing investigation.
3.4. Indemnification
By using the Docusearch service, the user agrees to indemnify and hold harmless REEA SRL, its employees, representatives, and partners from any claim, cost, expense (including attorneys’ fees), damage, or liability arising from:
- Content uploaded by the user to the service
- The user’s breach of these Terms and Conditions
- The user’s infringement of a third party’s rights through the service
4. Limitations and Disclaimers
4.1. Nature of Responses
The responses provided by Docusearch are algorithmically generated and are for informational purposes only. They may contain:
- Inaccurate or incomplete information
- Misinterpretations of sources
- Content generated incorrectly due to technological limitations
4.2. Disclaimer of Warranties
REEA SRL makes no express or implied warranties regarding:
- The accuracy, completeness, or timeliness of the responses
- The uninterrupted availability of the service
- Error-free or defect-free operation
4.3. Disclaimer
The answers generated by Docusearch do not represent the official position of REEA SRL. REEA SRL assumes no liability for:
- Decisions made based on information provided by Docusearch
- Losses or damages resulting from the use of the service
- Inappropriate or offensive content
4.4. Not Professional Advice
Docusearch does NOT provide and should not be interpreted as providing:
- Technical, engineering, or construction advice
- Legal or compliance advice
- Purchase recommendations or product specifications
- Any other type of specialized professional advice
For such needs, consult licensed professionals in the relevant field.
5. Acceptable Use
5.1. User Obligations
By using Docusearch, you agree to:
- Use the service only for lawful purposes and in compliance with applicable regulations
- Not transmit abusive, offensive, discriminatory, or illegal content
- Not attempt to compromise the security or functionality of the service
- Not use the service for unauthorized commercial activities or spam
- Not enter personal data or special categories of data
- Not enter content that infringes on the intellectual property rights of third parties
- Not use the service to generate content that may harm third parties
5.2. Right of Suspension
REEA SRL reserves the right to suspend or restrict access to Docusearch in the event of non-compliance with these obligations, without prior notice.
6. Availability and Changes
6.1. Availability
Docusearch is provided “as is.” We do not guarantee uninterrupted availability of the service and are not liable for temporary or permanent interruptions.
6.2. Right to Modify
REEA SRL reserves the right to:
- Modify the service’s features
- Temporarily or permanently suspend Docusearch
- Update these Terms and Conditions
- Change the location of the servers, including by moving them outside the EU/EEA (U.S., Canada), in compliance with applicable GDPR requirements
All changes take effect upon publication. Significant changes regarding the processing of personal data will be communicated to users via notification at least 15 days prior to taking effect. If the changes involve a new purpose of processing, new consent will be requested.
Continued use of the service after changes constitutes acceptance of the new terms.
7. Commercial Use and Partnerships
7.1. Commercial Use by Third-Party Companies
The use of the Docusearch service for commercial purposes by third-party companies or legal entities is permitted exclusively under a written agreement with REEA SRL. Commercial use includes, but is not limited to:
- Integration of the Docusearch service into proprietary products or platforms
- Using the service for the purpose of generating direct or indirect revenue
- Using the generated responses for publication or commercial redistribution
- Using the service on behalf of third-party clients
7.2. Prohibition of Unauthorized Use
The following is strictly prohibited without the prior written consent of REEA SRL:
- Reselling or sublicensing access to the service
- Integrating the API or the Docusearch interface into third-party commercial products
- Scraping or automatically extracting responses for commercial purposes
- Using the Docusearch brand in third-party commercial materials without the explicit consent of REEA SRL
7.3. Official Partnerships
Companies interested in an official partnership or a commercial use license may contact REEA SRL at: hello@docusearch.tech
Partnerships will be governed by a separate contract, which will establish:
- The rights and obligations of each party
- The terms of data use
- Responsibilities regarding the GDPR as a joint controller or data processor
- Applicable financial terms
7.4. Liability for Commercial Use
REEA SRL assumes no liability for:
- Damages caused to third parties as a result of unauthorized commercial use
- Business decisions made based on responses generated by Docusearch
- Any financial or reputational loss resulting from the use of the service for commercial purposes
8. Contractual Relationship with Business Customers
This chapter governs the relationship between REEA SRL, as the Provider of the Docusearch service, and the Business Customer — any legal entity, sole proprietorship, individual enterprise, or entity with legal personality that accesses the service for commercial, evaluation, or integration purposes.
By accepting these Terms and Conditions or by actually using the service in any of the forms described below, the Business Customer confirms that they have read, understood, and fully accepted the terms of this chapter.
In the event of a conflict between this chapter and an individual contract signed by both parties, the provisions of the individual contract shall prevail.
8.1. Definitions for Business Customers
| REEA / The Provider | REEA SRL, the developer and operator of the Docusearch service |
| Client / Business Client | Any legal entity, sole proprietorship, or other entity with legal personality that accesses Docusearch for commercial, evaluation, or integration purposes |
| Demo | Temporary, private access, configured and hosted exclusively on REEA SRL’s infrastructure, based on documents provided by the Client, intended solely for internal evaluation, without public access |
| Trial | 14-day temporary access, unless otherwise specified, which can be integrated into the Client’s own platform and made available to the public. If card details are provided, the Subscription is automatically activated upon Trial expiration |
| Subscription | Continuous licensed access, activated automatically upon Trial expiration (if card details were provided) or by separate agreement, billed on a recurring basis with automatic renewal |
| Automatic Renewal | The mechanism by which the Subscription is automatically extended at the end of each billing period, until expressly canceled |
| Client Content | Documents, data, files, or materials provided by the Customer as part of the Demo, Trial, or Subscription |
| End User | The individual who interacts directly with the Docusearch interface |
| Integration | The incorporation of Docusearch functionalities (interface, API, widget) into a Client’s platform |
8.2. Nature of the Contractual Relationship
8.2.1. The relationship between REEA SRL and the Business Client is that of a service provider and service recipient, governed by these Terms and Conditions and, where applicable, by an individual contract signed by both parties.
8.2.2. REEA SRL provides the Client with access to the Docusearch service in the agreed form (Demo, Trial, or Subscription). The Client uses the service at their own risk, within the limits established by this document.
8.2.3. The specific form of access, technical parameters, duration, and financial terms are established through the electronic acceptance of this document and/or through a Service Order, accepted Offer, or separate Contract signed by both parties.
8.2.4. Transition between access forms. The Customer may access the service in any combination of forms, depending on their needs:
- A Customer may start directly with a Demo, without going through a Trial
- A Customer may access a Trial without a prior Demo
- Both the Demo and the Trial may be followed by a Subscription
- If the Customer provides card details upon registering for the Trial, the transition to a Subscription occurs automatically upon the expiration of the 14 days, without requiring any additional action or confirmation
- If no card details are provided upon registration, the transition to a Subscription requires a separate agreement
8.3. Obligations of REEA SRL (the Provider)
REEA SRL undertakes to:
8.3.1. Provide the Client with access to the Docusearch service in the agreed form, in accordance with the agreed parameters and within the established timeframes.
8.3.2. Ensure the security of processed data in accordance with Article 32 of the GDPR.
8.3.3. Delete the documents and data provided by the Client in accordance with the terms set forth in Sections 8.5.4 (Demo) and 8.6.4 (Trial).
8.3.4. Not use the documents provided by the Client for any purpose other than the agreed-upon one and not share them with unauthorized third parties.
8.3.5. Not use the documents provided by the Client to train REEA SRL’s own AI models without the Client’s explicit written consent.
8.3.6. Notify the Client of any significant changes at least 15 calendar days before they take effect.
8.3.7. Notify the Client within 72 hours in the event of a security incident (data breach) affecting the Client’s data.
8.3.8. Respect the confidentiality of all information provided by the Client.
8.3.9. Provide the Client, upon request, with an export of data generated during the Trial, in a structured format.
8.4. Obligations of the Business Client
The Client agrees to:
8.4.1. Use the Docusearch service exclusively for the agreed purposes without exceeding technical parameters.
8.4.2. Not redistribute, resell, or sublicense access to the service without REEA SRL’s prior written consent.
8.4.3. Ensure that it holds all necessary rights to the documents and content provided.
8.4.4. Not enter personal data without an explicit legal basis and without a DPA signed with REEA SRL.
8.4.5. Inform its end users regarding the use of the Docusearch service and ensure their compliance with these Terms.
8.4.6. Comply with imposed technical limits and not attempt to circumvent them.
8.4.7. Immediately notify REEA SRL of any security breach or unauthorized use of access credentials.
8.4.8. Pay for the services in accordance with agreed financial terms.
8.4.9. Not use the Trial for scraping or redistribute Trial access to third parties.
8.4.10. Explicitly cancel the Subscription or Trial using one of the methods in Section 8.7 if you do not wish to continue.
8.5. DEMO – Private Access Hosted by REEA
8.5.1. Definition and Purpose. The Demo represents private, temporary, and customized access, configured and hosted exclusively on REEA SRL’s infrastructure, based on documents provided by the Client. It is intended exclusively for internal evaluation and is not accessible to the general public.
8.5.2. Demo Limitations:
- Valid for 14 calendar days from activation, unless otherwise specified in writing.
- Hosted exclusively on REEA SRL’s infrastructure and may not be moved, copied, or replicated.
- Intended solely for internal use and may not be accessed by external users.
- May not be integrated into third-party platforms or made publicly available.
- Query numbers may be technically limited without prior notice.
- REEA SRL does not guarantee uninterrupted availability.
- Responses are for demonstration purposes only and do not constitute professional advice.
- The Demo does not grant intellectual property rights over the configuration, algorithms, or responses.
8.5.3. Documents Provided by the Client. The Client provides documents at their own risk. REEA SRL will use them exclusively for the Demo. Documents will not be shared with third parties or used to train AI models.
8.5.4. Procedure for Terminating the Demo. The Demo terminates:
- Upon expiration of the 14-day period – automatically;
- At the Client’s request – via written notice to hello@docusearch.tech or the client account; REEA SRL will deactivate within 5 business days;
- At REEA SRL’s initiative – in case of abusive use, with subsequent notification.
Effects of termination: Demo instance deactivated, documents deleted within 30 calendar days, conversations deleted per standard 90-day retention policy. No mutual financial obligations arise.
8.6. TRIAL
8.6.1. Definition and Purpose. The Trial provides 14-day temporary access (unless otherwise agreed in writing) for integration into the Client’s own platform, potentially accessible to the public, for technical and commercial testing.
8.6.2. Trial Activation and Card Information.
8.6.2.1. The Client may choose to provide card information upon registration.
8.6.2.2. By providing card details and accepting these Terms, the Customer expressly agrees to automatic Subscription activation, automatic card charging, and automatic renewal until canceled.
8.6.2.3. During the 14-day Trial, the Customer is not billed. Billing begins on the Trial expiration date.
8.6.2.4. Without card details, access ends automatically upon Trial expiration.
8.6.3. Trial Limitations: 14-day duration, limited API queries, no guaranteed availability, no dedicated support, informational responses only, no permanent licensing rights.
8.6.4. Client Responsibilities in Public Access Trial:
- The Client is solely responsible for presentation to end users.
- Must inform users of the Beta/Trial status.
- Must display a link to these Terms.
- Must comply with GDPR and sign a DPA before public integration.
- Must respect technical limits.
8.6.5. Trial Cancellation. The Trial may be canceled at any time within 14 days without financial obligation:
- From the client account: Go to “Subscription” or “Trial” section
- Via email: Send a cancellation request to hello@docusearch.tech
Effects: access revoked, data deleted per 90-day retention policy, data export available upon request. REEA SRL may also cancel for violations.
8.7. SUBSCRIPTION
8.7.1. Activation. Via automatic conversion from Trial (if card details provided) or manually by agreement.
8.7.2. Automatic Renewal. The Subscription renews automatically at each billing period end. If payment fails, REEA SRL grants a 5-day grace period.
8.7.3. Cancellation. Cancel any time from the customer account or by emailing hello@docusearch.tech. Cancellation takes effect at the end of the current billing period. No pro-rata refunds except as required by law.
8.7.4. Additional Terms. Specific Subscription terms are available in the customer account or may be set forth in a separate Service Agreement.
8.8. Intellectual Property
8.8.1. The Docusearch Service is the exclusive property of REEA SRL and is protected by applicable IP laws.
8.8.2. Access does not grant ownership rights, permanent license, or right of reproduction.
8.8.3. The Client retains all IP rights to their provided content.
8.9. Confidentiality
8.9.1. Both parties agree to keep confidential all commercial, technical, or other information obtained during the relationship.
8.9.2. Exceptions: public information, legally required disclosures, previously known information.
8.9.3. Confidentiality obligation remains in effect for 3 years after termination.
8.10. Limitation of Liability to Business Customers
8.10.1. REEA SRL does not guarantee uninterrupted operation during Demo or Trial periods.
8.10.2. REEA SRL assumes no liability for Client’s decisions, losses from unavailability, technical incompatibilities, or damages to end users.
8.10.3. Total liability shall not exceed the value of services paid in the last 3 calendar months (for paid Subscriptions).
8.10.4. For Demo and Trial without card, liability is limited to gross negligence or willful misconduct.
9. Contact Information
| Data Protection (GDPR) | dpo.in@reea.net |
| Trial / Subscription Cancellation | hello@docusearch.tech |
| Partnerships and Commercial Use | hello@docusearch.tech |
| General Support | hello@docusearch.tech |
10. Final Provisions
10.1. Governing Law
These Terms and Conditions are governed by Romanian law and Regulation (EU) 679/2016 (GDPR), as well as Law No. 190/2018.
10.2. Severability
If any provision is deemed invalid or unenforceable, the remaining provisions shall remain in full force and effect.
10.3. Entire Agreement
These Terms and Conditions constitute the entire agreement between you and REEA SRL regarding the Docusearch service, supplemented where applicable by individual contracts with Business Clients.
10.4. Competent Court
Any dispute shall be resolved by the competent courts of Romania. The parties shall make reasonable efforts to resolve disputes amicably.
10.5. Language of the Document
This document is drafted and published in Romanian, which constitutes the official and binding version. In the event of translation, the Romanian version shall prevail in all respects. REEA SRL assumes no liability for errors in translated versions.
Privacy Policy
Version 1.0.0 | Last updated: March 16, 2026
This Privacy Policy describes how REEA SRL collects, uses, stores, and protects your data within the Docusearch service developed and operated by REEA SRL.
1. Who We Are
Docusearch is a product of:
REEA SRL
Registered office: Mureș County, Târgu Mureș, Republicii Street, No. 41
Registered with the Trade Registry under No. J1998000628265
Tax ID: RO10966500
Data Protection Email: dpo.in@reea.net
Data Protection Officer (DPO): Sarb Andrei-Claudiu
REEA SRL acts as a data controller within the meaning of Art. 4(7) of Regulation (EU) 679/2016 (GDPR), determining the purposes and means of processing personal data within the Docusearch service.
2. What Data We Collect
2.1. Data Actively Provided by the User
The Docusearch service processes exclusively the questions and queries you enter into the conversation interface. Docusearch does not request or collect:
- First or last name
- Email address
- Phone number
- Location data
- Personal identification data of any kind
2.2. Data Stored Locally in the Browser
The service uses your browser’s local storage mechanisms:
Local Storage – Conversation history, for session continuity. Duration: until manually deleted or browser data is cleared.
Session Storage – Temporary data for the current session. Duration: automatically deleted when the tab or browser is closed.
This data is stored exclusively on your device and is not transmitted to REEA SRL servers except to the extent necessary for the service to function.
2.3. Technically Processed Data
During the process of generating responses, your queries are transmitted to the Gemini API, a service provided by Google LLC, which acts as a data processor under the GDPR. Google processes this data exclusively for the purpose of generating the requested response.
3. Why We Collect This Data — Legal Grounds
Data processing is carried out pursuant to Article 6 of the GDPR, as follows:
| Processing inquiries to generate responses | Execution of the service requested by the user |
| Temporary technical storage of conversations (90 days) | Legitimate interest of the controller |
| Use of incorrectly entered data to improve the algorithm | Explicit consent of the user |
4. How Long We Retain Data
| REEA SRL servers | 90 days, with automatic deletion upon expiration |
| Gemini API (Google) | In accordance with Google LLC policies |
| Browser Local Storage | Until manually deleted by the user |
| Browser Session Storage | For the duration of the active session |
5. Who We Share Data With
REEA SRL does not sell or market your data to third parties. Data is shared exclusively with:
5.1. Google LLC — Gemini API
Role: Data Processor
Purpose: Technical processing of questions and generation of responses
Safeguards: Google LLC complies with GDPR requirements as a Processor
Details: https://policies.google.com/privacy
5.2. Competent Authorities
In the event of legal obligations or judicial proceedings, REEA SRL may provide data to the competent authorities, exclusively within the limits provided by applicable law.
5.3. Payment Processors
When a payment is made, certain data (such as name, email address, transaction details) may be transmitted to third-party payment processors for the purpose of authorizing and processing the transaction. These providers act as data processors on behalf of the controller, based on contractual agreements, and process the data exclusively for the purpose of processing payments and complying with applicable legal obligations.
6. Where We Store Data — Location and International Transfers
6.1. Default Location
By default, data processed through the Docusearch service is stored and processed within the EU/EEA:
- REEA SRL’s servers are hosted within the European Union
- Gemini API (Google) processes data through European endpoints
6.2. Possibility of International Transfer
Important: Depending on operational needs, servers may be migrated to infrastructure in the United States (US) or Canada.
In such a case, REEA SRL undertakes to ensure an adequate level of protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Other appropriate safeguards in accordance with Article 46 of the GDPR
Users will be notified at least 15 days prior to any significant change regarding data location.
7. Prohibition on Entering Personal Data
The Docusearch service is not designed for the processing of personal data. Therefore:
DO NOT enter personal data or special categories of data within the meaning of Article 9 of the GDPR into conversations with Docusearch, including:
- Health data
- Biometric or genetic data
- Racial or ethnic origin
- Political opinions, religious or philosophical beliefs
- Data concerning sexual life or sexual orientation
- Data regarding criminal convictions
You may withdraw this consent at any time by contacting REEA SRL at dpo.in@reea.net, without affecting the lawfulness of processing prior to withdrawal.
8. Automated Processing and Automated Decision-Making
Docusearch generates responses exclusively through automated processes, using Gemini (Google) language models. In accordance with Article 22 of the GDPR:
- Logic used: The system analyzes the entered question and generates a relevant response based on the indexed content
- Consequences: Responses are strictly informational and do not produce legal effects or binding decisions for the user
- Right to object: You have the right not to be subject to a decision based solely on automated processing that produces significant legal effects
9. Data Security
REEA SRL implements appropriate technical and organizational measures in accordance with Art. 32 GDPR:
- Encryption of data in transit (HTTPS/TLS protocol)
- Server hosting, by default, within the European Union
- Strict control of access to processing systems
- Periodic security assessments
- Automatic deletion of data upon expiration of the 90-day period
- Complete absence of user tracking or monitoring systems
9.1. Procedure in the Event of a Security Incident
In the event of a security incident (data breach):
- ANSPDCP will be notified within a maximum of 72 hours of discovery, in accordance with Art. 33 GDPR
- Data subjects will be notified without undue delay if the incident poses a high risk to their rights and freedoms, in accordance with Article 34 of the GDPR
10. Your Rights
In accordance with the GDPR, you have the following rights:
| Right of access (Art. 15) | You may request a copy of the processed data |
| Right to rectification (Art. 16) | You may request the correction of inaccurate data |
| Right to erasure (Art. 17) | You may request the erasure of your data (“right to be forgotten”) |
| Right to restriction (Art. 18) | You may request the restriction of processing |
| Right to data portability (Art. 20) | You may request your data in a structured, machine-readable format |
| Right to object (Art. 21) | You may object to processing based on legitimate interest |
| Withdrawal of consent (Art. 7(3)) | You may withdraw your consent at any time |
| Right not to be subject to automated decisions (Art. 22) | You may challenge decisions made solely by automated means |
10.1. How to Exercise Your Rights
Send your request to: dpo.in@reea.net
Response time: Maximum 30 calendar days from receipt. In complex cases, the deadline may be extended by 60 days, with prior notification.
10.2. Right to File a Complaint
If you believe your rights have been violated, you may file a complaint with:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: 28-30 General Gheorghe Magheru Blvd., Sector 1, Bucharest, 010336
Phone: +40.318.059.211
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro
11. Protection of Minors
The Docusearch service is not intended for persons under the age of 16, in accordance with Art. 8 of the GDPR and Law No. 190/2018.
- If you are a minor under 16, do not use this service without parental consent
- REEA SRL does not intentionally collect data from minors
- Any data identified as belonging to minors under 16 will be deleted immediately
12. Changes to the Privacy Policy
REEA SRL reserves the right to update this Privacy Policy. In the event of significant changes:
- Users will be notified at least 15 days prior to the changes taking effect
- If the changes involve a new purpose of processing, new consent will be requested
- The version and date of the last update will be indicated in the document header
Continued use of the service after the changes are published constitutes acceptance of the new Privacy Policy.
13. Contact
For any questions regarding this Privacy Policy or to exercise your GDPR rights:
dpo.in@reea.net
DPO: Sarb Andrei-Claudiu
14. Final Provisions
14.1. Governing Law
This Privacy Policy is governed by Regulation (EU) 679/2016 (GDPR), Law No. 190/2018, and applicable Romanian legislation.
14.2. Language of the Document
This document is drafted and published in Romanian, which constitutes the official and legally binding version. The Romanian version shall prevail in all respects. REEA SRL assumes no liability for errors in translated versions.
Relationship to the Docusearch Terms and Conditions:
This Privacy Policy shall be read in conjunction with the Docusearch Terms and Conditions v1.0.0. In the event of a conflict regarding data processing matters, this Privacy Policy shall prevail.
Cookie Policy for the Docusearch Website and Web Application
Version 1.0.0
1. What are cookies?
Cookies are small tracking files that a website stores in the user’s browser to save data that can be used for functional purposes (e.g., the fact that you are logged in) or for tracking purposes (e.g., the duration of a visit, the source of a campaign that brought you to us). If you visit that website again, it will be able to read the previously stored information and recognize you.
Cookies do not contain software, viruses, or spyware and cannot access information on the user’s hard drive. Only the issuer of a cookie can read or modify the information contained in that cookie.
The cookies used fall into two categories:
First-party cookies are cookies set by Reea or on our behalf on the Website. These can be (i) session cookies — stored on your device only while you visit the Website and which expire once you close your browser, and (ii) persistent cookies — stored for a period of time on your browser and after you stop using the Website, these being set to expire on a set date or when manually deleted.
Third-party cookies are cookies set by other companies and whose functionality is incorporated into our website (for example, cookies from google.com).
The table below describes the various categories of cookies and similar technologies we use, the purpose for which we use them, who uses them, and how long they remain active.
The list of third-party cookie providers is provided for informational purposes only and is not intended to be exhaustive.
2. How is user consent obtained?
When you first visit the Website, a banner appears asking you to accept the use of certain cookies. It is important to know that all cookies that do not serve a functional purpose — specifically those originating from domains other than docusearch.tech — are disabled by default.
By accepting them — by clicking the “accept” button or checking the acceptance box — you consent to their use on the device you are using to browse. Accepting cookies helps us understand your browsing preferences and thus improve the services we offer.
3. How can you manage cookies?
In the bottom-right corner of the Website’s main pages and throughout your browsing experience, you have access to the interface for managing cookies and similar technologies.
By selecting the “Manage services” option, you can configure your individual preferences. Cookies are grouped by category and can be enabled or restricted individually, depending on your specific choices.
Button meanings:
- “Allow” – marked in green – indicates permission for some or all modules
- “Deny” – marked in gray – indicates that some or all modules are blocked
You can also configure cookies in the settings of the browser you are using.
Please note that if you choose to block all cookies in your browser, your browsing experience on the Web Application may be hindered or become completely non-functional.
- Cookie settings in Internet Explorer
- Cookie settings in Firefox
- Cookie settings in Chrome
- Cookie settings in Safari Web
- Cookie settings in iOS
If you do not want cookies provided by Google Analytics to be placed, you can use the browser add-on: Google Analytics Opt-out
Cookie Table
| Name | Domain | Purpose | Duration | Type |
|---|---|---|---|---|
| _ga | Google Analytics | 2 years | cookie | |
| _gid | Google Analytics | 24 hours | cookie | |
| _gat_gtag_[property_id] | Google Analytics | 1 minute | cookie | |
| tarteaucitron | Docusearch | Cookie consent management | 1 year | cookie |