Last updated: 1 April 2026
These Terms of Service (“Terms”) govern your use of the AILANG Parse document parsing service (“Service”) operated by Holosun ApS (“we”, “us”, “our”). By using the Service, you agree to these Terms and the Data Processing Agreement below.
1. Service Description
AILANG Parse is a document parsing API and browser tool that extracts structured content from files. The Service supports 13 input formats and 9 output formats, with deterministic parsing for Office formats and AI-assisted parsing for PDFs and images via user-selected AI providers.
The Service is also available as a browser-based WebAssembly tool and a local CLI. These modes process data entirely on your device and are not covered by these Terms (no data is transmitted to us).
2. Beta Status
The Service is currently in beta. This means:
- Features may change without notice
- No uptime SLA is provided
- We may reset rate limits, quotas, or pricing tiers during the beta period
- We will provide reasonable notice before any changes that affect paying customers
3. Your Data & GDPR Responsibilities
You are the data controller for any personal data contained in documents you upload. This means:
- You are responsible for ensuring you have a lawful basis to upload and process this data
- You are responsible for fulfilling your obligations to data subjects (access, erasure, etc.)
- You must assess whether cloud processing is appropriate for your data’s sensitivity
We are the data processor. We process your documents only as instructed — to parse them and return results. Our processor obligations are set out in the Data Processing Agreement below.
4. Pricing & Billing
- Current pricing tiers are listed on the pricing page
- Prices are in EUR, billed monthly
- Rate limits are per tier and are hard limits
- We may change pricing with 30 days’ notice to existing customers
- Billing is managed through your dashboard
5. Acceptable Use
You agree not to:
- Upload illegal content or content you do not have the right to process
- Reverse engineer, decompile, or extract the parsing engine
- Resell API access without a written agreement
- Automated scraping of the documentation site
- Attempt to circumvent rate limits or authentication
6. Intellectual Property
- Your content: You retain all rights to your uploaded documents and the parsed output. We claim no rights over your content or results.
- Our service: Holosun ApS retains all rights to the AILANG Parse service, parsing engine, AILANG runtime, documentation, and website.
7. Document Handling
- Most documents are processed in memory only and discarded after the response is returned
- Large files may be temporarily stored for processing, encrypted at rest (AES-256), and auto-deleted after 1 day
- No human review of uploaded document content
- When you select AI parsing, document content is sent to your chosen AI provider. By selecting AI parsing, you instruct us to engage that provider as a sub-processor.
- We do not use document content for training, analytics, or any purpose beyond fulfilling your parsing request
8. API Usage
- API keys are confidential — you are responsible for securing them
- We may suspend keys for abuse, excessive error rates, or non-payment
- No SLA is provided during the beta period
9. Limitation of Liability
The Service is provided “as is” and “as available”, particularly during the beta period.
- We are not liable for parsing accuracy — Office parsing is deterministic and best-effort; PDF/image parsing depends on the AI provider
- We are not liable for actions of AI providers you select
- Our total liability is capped at the fees you paid to us in the prior 12 months
- We are not liable for indirect, incidental, or consequential damages
10. Termination
- You may delete your account at any time via the dashboard or by contacting us
- We may terminate for breach with 14 days’ written notice
- On termination: API access is revoked and any temporarily stored files are deleted within 1 day
11. Governing Law
These Terms are governed by Danish law. Disputes shall be resolved by the courts of Copenhagen, Denmark.
12. Changes to These Terms
We may update these Terms from time to time. For material changes, we will provide 30 days’ notice via email to registered users. Continued use after the notice period constitutes acceptance.
Data Processing Agreement
Standard Contractual Clauses for the purposes of Article 28(3) of Regulation 2016/679 (the GDPR), based on the Datatilsynet standard template.
Between:
- Data Controller: You, the customer using the AILANG Parse API
- Data Processor: Holosun ApS, Denmark — docparse@sunholo.com
These Clauses set out the rights and obligations of the data controller and data processor when processing personal data on behalf of the data controller. They take priority over any similar provisions in other agreements between the parties.
Clause 1 — Controller’s rights and obligations
The data controller is responsible for ensuring that the processing of personal data takes place in compliance with the GDPR and applicable data protection provisions. The controller shall ensure that the processing instructed has a legal basis.
Clause 2 — Processor acts on instructions
The data processor shall process personal data only on documented instructions from the data controller, as specified in Appendix A and C below. The processor shall immediately inform the controller if an instruction, in the processor’s opinion, contravenes the GDPR.
Clause 3 — Confidentiality
The data processor shall only grant access to personal data to persons who have committed to confidentiality and only on a need-to-know basis.
Clause 4 — Security of processing
The data processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, pursuant to Article 32 GDPR. Measures are described in Appendix C.
Clause 5 — Sub-processors
The data processor has the controller’s general written authorisation to engage sub-processors. The processor shall inform the controller of any intended changes at least 30 days in advance, giving the controller the opportunity to object. The current list is in Appendix B.
The processor remains fully liable for the sub-processor’s obligations.
Clause 6 — International transfers
Transfers to third countries shall only occur on documented instructions and in compliance with GDPR Chapter V. Transfer details are in Appendix C.
Clause 7 — Assistance to the controller
The processor shall assist the controller with: data subject rights requests, breach notification (Articles 33-34), data protection impact assessments (Article 35), and prior consultation with supervisory authorities (Article 36).
Clause 8 — Breach notification
The processor shall notify the controller of any personal data breach without undue delay and within 24 hours of becoming aware of it, including: the nature of the breach, likely consequences, and measures taken to address it.
Clause 9 — Erasure and return of data
On termination, the processor shall delete all personal data and certify deletion. For AILANG Parse, this is substantially satisfied by the architecture: documents are processed ephemerally or temporarily stored with automatic deletion within 1 day.
Clause 10 — Audit
The processor shall make available all information necessary to demonstrate compliance with Article 28 and allow for audits. Audit procedures are in Appendix C.
Clause 11 — Commencement
These Clauses become effective when you begin using the AILANG Parse API and apply for the duration of the service.
Appendix A — Processing Details
| Purpose | Parsing and converting documents on behalf of the controller. Extracting structured content from uploaded files and returning results via API. |
| Nature | Automated processing. Office formats: deterministic structural parsing, no AI. PDFs/images: AI-assisted extraction via user-selected provider. |
| Personal data types | Any personal data in uploaded documents, determined by the controller. May include names, contact details, financial data, employment records, health data, or any other category. |
| Data subjects | Determined by the controller. May include employees, customers, partners, or any individuals whose data appears in uploaded documents. |
| Duration | For the term of the service. Individual processing is ephemeral (seconds to minutes). Large files may be temporarily stored up to 1 day. |
Appendix B — Authorised Sub-processors
| Sub-processor | Processing | Location |
|---|---|---|
| Google Cloud Platform Cloud Run, Cloud Storage |
API hosting, ephemeral compute, temporary encrypted file storage | EU (europe-west1) |
| Firebase Authentication Google LLC |
User authentication. Email, tokens, IP only. No document content. | US (DPF + SCCs) |
| Google Gemini Vertex AI |
AI-assisted PDF/image parsing. Only when selected by controller. No retention, no training. | EU preferred; US fallback (DPF + SCCs) |
Notice period: 30 days before engaging new sub-processors. Controller may object within 14 days.
Appendix C — Instructions & Security Measures
C.1 Instructions
The processor shall: parse uploaded documents and return structured content; process only to fulfil the API request; not use content for any secondary purpose; not access content except as required by automated processing.
C.2 Security measures
| Encryption in transit | TLS 1.2+ for all API communications |
| Encryption at rest | AES-256 for temporarily stored files (Google-managed keys) |
| Ephemeral processing | Documents parsed in memory in Cloud Run containers; no persistent disk |
| Auto-deletion | Large files auto-deleted after 1 day via GCS lifecycle policy |
| Access control | Infrastructure access limited to authorised Holosun ApS personnel |
| No human review | Document content is never viewed by staff in normal operations |
| AI controls | Vertex AI enterprise API: no model training on customer data |
| Logging | Request metadata only (timestamp, file type, response time). Document content is NOT logged. |
C.3 Erasure
Small documents: erased from memory after API response. Large files: deleted from GCS within 1 day. On termination: API access revoked, any stored files deleted within 1 day. Certification of erasure available on request.
C.4 Processing location
Primary: europe-west1 (Belgium). Firebase Auth: US (DPF + SCCs). Vertex AI: EU preferred, US fallback (DPF + SCCs). Alternative regions available on request.
C.5 International transfers
Transfers to the US occur for: (1) Firebase Authentication — auth metadata only, via EU-US DPF + SCCs; (2) Vertex AI when AI parsing is selected — ephemeral, via DPF + SCCs. A Transfer Impact Assessment is available on request.
C.6 Audit
The controller may audit compliance by: (1) requesting documentation; (2) written security questionnaire (20 business day response); (3) on-site/remote audit with 30 days’ notice, at controller’s cost, max once per 12 months. The processor may satisfy requests with certifications or documentation.
Appendix D — Other Terms
Liability and indemnification are governed by the Terms of Service above. In case of conflict, these DPA Clauses prevail for data protection obligations.
This DPA is based on the Datatilsynet (Danish Data Protection Authority) standard template for Article 28(3) GDPR. datatilsynet.dk