Privacy Policy

How AILANG Parse handles your data.

1. Who We Are

AILANG Parse is operated by Holosun ApS, a company registered in Denmark. We provide a document parsing service that extracts structured content from Office documents, PDFs, images, and other file formats.

Privacy contact: docparse@sunholo.com

2. Data We Collect

CategoryWhatRetention
Small documents Files sent via API for parsing Ephemeral — processed in memory, discarded after response is returned
Large files Files too large for in-memory processing Temporary storage, encrypted at rest (AES-256), auto-deleted after 1 day
AI-routed documents Content sent to your selected AI provider (e.g. Google Gemini) for PDF/image parsing Per AI provider’s terms. We do not retain AI inputs or outputs.
Browser / CLI parsing Documents parsed via WebAssembly in your browser or the local CLI No server involvement. Data never leaves your device.
Account & auth Email address, authentication tokens (via Firebase) Until account deletion
API keys Key identifiers, labels, creation dates Until key revocation or account deletion
Usage metrics Request counts, file types, response times. No document content. 12 months
Contact / email Name, email, message content when you contact us 24 months
No analytics on these pages. AILANG Parse pages do not load Google Analytics, tracking scripts, or advertising pixels. However, if you have previously visited www.sunholo.com, analytics cookies set by that site (e.g. _ga) may be visible in your browser since both sites share the sunholo.com domain. These cookies are not read or used by AILANG Parse.
  • Contract (Art. 6(1)(b)) — Processing documents you submit via the API is necessary to perform the service you requested.
  • Legitimate interest (Art. 6(1)(f)) — Usage metrics for service improvement and security monitoring.
  • Consent — Contact form submissions and optional communications.

4. Data Processor Role

When you upload documents containing personal data to our API, the GDPR roles are:

  • You (the API customer) are the data controller. You decide what data to upload and are responsible for having a lawful basis to process it.
  • Holosun ApS is the data processor. We process your documents only as instructed — to parse them and return results.

As data processor, we:

  • Process documents only to fulfil your API request
  • Do not use document content for training, analytics, profiling, or marketing
  • Do not anonymise, pseudonymise, or make decisions based on document content
  • Do not access or review document content except as required by automated processing

A Data Processing Agreement based on the Datatilsynet standard template governs our processor obligations.

Sensitive data recommendation: For documents containing special category personal data (GDPR Article 9 — health, biometric, racial/ethnic data, etc.), we recommend using browser-based or CLI parsing, which processes data entirely on your device without transmitting it to our servers.

5. AI Provider Data Handling

When you select AI-assisted parsing for PDFs, images, audio, or video:

  • Document content is sent to the AI provider you configure (currently Google Gemini via Vertex AI)
  • By selecting AI parsing, you instruct us to engage that provider as a sub-processor for your request
  • We use enterprise Cloud API endpoints — your data is not used for model training under Google Cloud’s data processing terms
  • We do not retain AI inputs or outputs after your response is delivered
  • Office format parsing (DOCX, PPTX, XLSX, ODT, ODP, ODS, HTML, Markdown, CSV, EPUB) is fully deterministic and never involves AI

6. Sub-processors

ProviderPurposeLocation
Google Cloud Platform
Cloud Run, Cloud Storage
API hosting, ephemeral compute, temporary file storage EU (europe-west1)
Firebase Authentication User authentication. Receives email, auth tokens, IP at login. No document content. US (EU-US DPF + SCCs)
Google Gemini
Vertex AI
AI-assisted PDF/image parsing. Only when you select AI parsing. No data retention, no model training. EU endpoint preferred; US fallback (EU-US DPF + SCCs)

We will notify customers before adding new sub-processors, with the right to object. See the DPA for details.

7. International Transfers

  • Primary infrastructure: EU (europe-west1, Belgium). All compute and document storage stays in the EU.
  • Firebase Authentication: US — covered by the EU-US Data Privacy Framework (Google is on the DPF list) + Standard Contractual Clauses as fallback.
  • Vertex AI: EU endpoint preferred. When US processing occurs, covered by EU-US DPF + SCCs.
  • Alternative regions available on request for customers with specific requirements.

A Transfer Impact Assessment has been conducted in accordance with EDPB Recommendations 01/2020 and is available on request.

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact docparse@sunholo.com. We will respond within 30 days.

You also have the right to lodge a complaint with Datatilsynet (the Danish Data Protection Authority) at datatilsynet.dk.

9. Security

  • TLS 1.2+ encryption for all API communications
  • Ephemeral processing: most documents parsed in memory only
  • Large files: encrypted at rest (AES-256), auto-deleted after 1 day
  • Cloud Run ephemeral containers with no persistent disk
  • API key authentication for all API requests
  • No human review of uploaded document content
  • Access controls limited to authorised Holosun ApS personnel
  • Document content is never logged

10. Cookies

This site uses only essential cookies:

  • Firebase Auth session cookie — required for authentication. Expires when the session ends.

AILANG Parse does not set or use analytics cookies, tracking pixels, or advertising cookies.

Parent domain cookies: If you have visited www.sunholo.com, Google Analytics cookies from that site (e.g. _ga, _gid) may appear in your browser on these pages because both sites share the sunholo.com domain. AILANG Parse does not load, read, or interact with these cookies. They are set by the main Sunholo website, not by this service.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date. For significant changes affecting your rights, we will provide 30 days’ notice via email to registered users.

12. Contact

Holosun ApS
Denmark
Email: docparse@sunholo.com