DARITHMA LTD

Privacy notice

How we handle personal data on this website, in DARITHMA Cloud and for DARITHMA Desktop licences. This page is a summary: the full Privacy Policy is Annex C of our Terms of Use, and Annex A covers the business data you keep in DARITHMA Cloud.

Last updated: 29 October 2026

1. Who is responsible

DARITHMA LTD (registered in Cyprus, HE476166), Gerolakkou Avenue 6A, 8540 Paphos, Cyprus, is responsible (the "controller") for this website, your DARITHMA account, billing and support. Privacy questions: info@darithma.com.

For the accounting data you enter into DARITHMA — customers, suppliers, employees, invoices, payroll — you are the controller, and we process it only on your behalf and on your instructions (Annex A of the Terms of Use). With DARITHMA Desktop that data stays on your own computer; we only hold your licence, billing and support details.

2. This website

• This website is hosted by Cloudflare. When you visit, Cloudflare processes technical data such as your IP address and browser details to deliver the pages and protect the site.
• The pages load their fonts from Google Fonts, so your browser connects to Google's servers.
• The Tutorials page shows previews of our videos from YouTube; the videos play on YouTube.
• We use no analytics, no advertising and no tracking cookies on this website.

3. Our forms

• The demo, support and custom-software forms send what you type — name, company, e-mail address, telephone and your message — to our server in Germany, together with the time of sending and your IP address (to stop abuse of the forms).
• We use it only to answer you and arrange what you asked for, and we send you a confirmation e-mail. We keep it as long as needed for your request and its follow-up, and we never sell it or share it for marketing.

4. Your DARITHMA Cloud account

• Account: your name, username, e-mail address, company details and the settings you choose.
• Security: at every sign-in we record that you accepted the Terms of Use (version, date and time, IP address and browser); your IP address is also used to limit repeated sign-in and sign-up attempts, and each company's audit trail notes who changed what, when and from which IP address. The sign-up and password-reset pages use a security check by Cloudflare (Turnstile).
• Cookies: DARITHMA Cloud uses only essential cookies — one that keeps you signed in, one that protects its forms, a short-lived one while a file downloads, and, on the card page, our payment provider Stripe's fraud-prevention cookies. No analytics or advertising cookies.
• Billing: our payment provider Stripe receives your name, billing address, VAT number and card details, and calculates VAT. We see your plan and payment status; we never see or store your full card number.
• E-mails: account e-mails (activation, password reset, billing notices) and the documents you choose to e-mail from DARITHMA are sent through our e-mail provider, Namecheap (Private Email).
• AI Document Reading: only if the company owner switches it on with the company's own Google API key. The documents you scan are then sent to Google's AI service under your own Google account and agreement — Google is your provider in this case, not ours. We keep the key encrypted, and the content of scanned documents is not written to our server logs.

5. Where the data is kept

• On our server with Hetzner Online GmbH in Germany.
• An encrypted backup is made every night and stored with DigitalOcean in Frankfurt, Germany, where a standby server can take over if our main server ever fails.

6. Our service providers

• Hetzner Online GmbH (Germany) — hosting of DARITHMA Cloud.
• DigitalOcean, LLC — encrypted backups and the standby server (Frankfurt, Germany).
• Stripe Payments Europe, Ltd. (Ireland) — payments, invoices and VAT calculation.
• Cloudflare, Inc. — hosting of this website; the security check on the sign-up and password-reset pages.
• Namecheap, Inc. — e-mail (Private Email) and the domain darithma.com.
• Google — fonts on this website and YouTube previews. (For AI Document Reading, Google works under your own account, not ours.)

They may use the data only to provide their service. Where a provider processes data outside the EU, it does so under the safeguards the GDPR requires, such as the EU Standard Contractual Clauses. We do not sell personal data.

7. How long we keep data

• Account data: while your account exists. After your subscription ends, until you ask us to delete it or we delete it after 30 days' notice by e-mail — normally within 30 days from our active systems and within 90 days from backups.
• Billing records: as long as tax and accounting law requires.
• Form messages: as long as needed for your request and its follow-up.

8. Your rights

You can ask to see, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format; where you gave consent, you can withdraw it at any time. Write to info@darithma.com. You can also complain to the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).

9. Security

Every connection is encrypted (HTTPS), backups are encrypted, and access to our servers and service accounts is restricted and protected with two-factor sign-in.

10. Changes

We update this notice when our services or providers change; the date at the top shows the latest version. See also our Subscription terms.