Security & Privacy
Your documents stay yours.
Here's exactly how.
We won't pretend your data lives only on your device — it doesn't. It lives on servers we operate in the EU, so we can help you find a 2022 invoice from a new laptop. Here is what we actually do, in plain language, to keep it private.
Hosted in the EU
All your documents and data are stored on EU-based infrastructure. Nothing is shipped to servers outside the European Union.
Only you can see your documents
Every file and every row in our database is scoped to your account using row-level security. Other MoienDesk users cannot access — or even list — your data through the app.
Encrypted in transit and at rest
Uploads travel over TLS. Files in our storage and database are encrypted at rest using AES-256, the industry standard.
Your data never trains AI models
We use AI to read your documents through enterprise API contracts (Google, OpenAI) that explicitly forbid using your content to train models.
Card details never touch our servers
Payments are processed by Paddle as Merchant of Record. We only ever see the last 4 digits and the brand — never the full card number.
The honest list
What we will and won't do
Trust is built on the boring details. Here are ours.
We will
- Process your documents to extract amounts, dates and deadlines
- Store your files privately so only your account can open them
- Let a support engineer help you on request, only with your permission
- Let you export everything and delete your account at any time
We won't
- Sell, rent or share your documents with third parties
- Use your content to train any AI model
- Show your documents to other MoienDesk users
- Access or store your full payment card number
Your GDPR rights
You're in charge of your data
- Right to access a copy of your data
- Right to export your documents
- Right to correct or delete personal data
- Right to close your account and remove your files
To exercise any of these rights, write tosupport@moiendesk.lu
Common questions
Frequently asked
Where exactly is my data stored?+
On EU-based managed Postgres and object storage. Files live in a private bucket; they are not publicly addressable.
Can MoienDesk staff read my documents?+
Through the app: no — row-level security prevents it. Technically, a privileged operator could access raw storage if you ask us to help (e.g. you contact support). We don't browse user files for any other reason.
Is the AI trained on my documents?+
No. We use Google Gemini and OpenAI via API contracts that explicitly exclude API inputs from model training.
What happens if I delete my account?+
Your documents and personal records are removed from our systems. Backup copies age out on a fixed schedule.
What about my payment card?+
Card data is handled entirely by Paddle, our Merchant of Record. MoienDesk never receives or stores it.