GDPR Compliance
TeXposit is operated by Orient, a company incorporated in Finland, inside the European Union. The General Data Protection Regulation (GDPR) applies directly to us. This page explains what we do to comply, what rights you have, and how to exercise them.
1. What makes us GDPR compliant
EU-only data storage
All user data (documents, account information, and chat history) is stored exclusively on servers in Finland and Germany. Your data never leaves the European Economic Area.
Encryption at rest and in transit
Documents and personal data are encrypted at rest and in transit using industry-standard TLS. Access is strictly limited to authenticated users.
No AI training on your data
Your LaTeX documents and conversations are never used to train AI models, by us or any third party. Your research stays yours. You can also bring your own AI service.
Data minimisation
We collect only what is necessary to operate the service: your email, name, and the content you choose to create. We do not sell or share personal data with third parties for advertising.
Lawful basis for processing
We process your personal data on the basis of contract performance (to provide the service you signed up for) and, where applicable, our legitimate interests in operating and improving the service.
Data retention limits
Your data is retained only for as long as your account is active or as required by law. When you delete your account, your personal data and documents are permanently removed.
2. Your rights under GDPR
Under the GDPR you have the following rights over the personal data we hold about you. To exercise any of them, email us at [email protected]. We will respond within one calendar month. All requests are free of charge.
Right of Access
Request a copy of all personal data we hold about you, including account information, projects, and chat history.
Right to Rectification
Correct inaccurate or incomplete personal data. Many fields can be updated directly in your account settings.
Right to Erasure
Request deletion of your account and all associated data. You can initiate this yourself in account settings, or contact us to handle it manually.
Right to Data Portability
Request a structured, machine-readable copy of your personal data (profile, projects, conversations) to transfer to another service.
Right to Restriction of Processing
Request that we pause processing of your personal data in certain circumstances, for example while disputing its accuracy.
Right to Object
Object to processing of your personal data where we rely on legitimate interests as the legal basis.
Right to Lodge a Complaint
If you believe your rights have not been respected, you can lodge a complaint with your national data protection authority.
3. How to submit a data request
Email [email protected] with your request. Please include the email address associated with your account so we can verify your identity.
For general questions about how we handle your data, you can also reach us at [email protected].
Orient • Kaitoväylä 20, Oulu 90570, Finland
4. Lodge a complaint
If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with your national data protection authority (DPA). You can always try resolving the issue with us first by contacting [email protected], but this is not a requirement.
Finland: Tietosuojavaltuutetun toimisto (tietosuoja.fi)
United Kingdom: Information Commissioner's Office (ico.org.uk)
Germany: Bundesbeauftragter für den Datenschutz (bfdi.bund.de)
France: Commission Nationale de l'Informatique et des Libertés (cnil.fr)
Other EU / EEA: European Data Protection Board – find your national DPA