Privacy Policy
Your documents are personal. We treat them that way.
Panza was built around a simple idea: your important documents should be easy to organize without giving up control over your data. This Privacy Policy explains what information we collect, why we collect it, how we protect it, and the choices you have.
This Privacy Policy applies to the Panza mobile app and the Panza website at https://panzaapp.com.
In plain English
- Your documents belong to you.
- We do not sell your personal data.
- We do not sell your documents.
- We do not use your documents to train AI models.
- We only process data needed to provide, secure, and improve Panza.
- You control who you share documents with.
- You can contact us to access, correct, export, or delete your personal data.
This summary is here to make the policy easier to understand. The full policy below is the legally relevant version.
1. Who we are
Panza is provided by:
Dani Does Design Kft.
Registered address: 2120 Dunakeszi, Cserkész 8., Hungary
Company registration number: 13-09-232573
Website: https://panzaapp.com
Contact: support@panzaapp.com
For the purposes of EU data protection law, Dani Does Design Kft. is generally the data controller for personal data processed through Panza, unless a specific service provider acts as an independent controller under its own terms.
2. What Panza does
Panza is a structured document vault. It helps you store, organize, preview, and share important documents.
In Panza, an item is a document entity, a card is a visual summary of that document, uploaded files are the primary assets, extracted fields create a structured data layer, sharing is role-based, processing may happen asynchronously, and the app is designed to be fast, minimal, and local-first where possible.
3. Information we collect
Account information
When you create or use a Panza account, we may collect your email address, name if provided, authentication identifiers, sign-in provider identifiers, preferred language, account settings, subscription and entitlement status, and timestamps related to account creation, sign-in, and account activity.
You may sign in using supported methods such as email, Apple Sign In, or Google Sign In. When you use a third-party sign-in provider, we receive the information needed to authenticate your account, such as your email address and provider identifier.
Documents and user content
When you use Panza, you may upload, create, or edit document files, images, document previews, card titles, extracted fields, manually added fields, field labels and values, tags, notes, stickers or visual card decorations, sharing settings, and other content you choose to store in Panza.
This content belongs to you. Panza stores and processes it to provide the app's features.
Documents may contain sensitive personal data or special categories of personal data, depending on what you choose to upload. We do not intentionally require you to upload special-category data, but the nature of a document vault means such information may appear in user-provided documents. You are responsible for deciding what to upload and share.
Document processing data
Panza may process documents to create previews, extract text, detect useful fields, and suggest structured information. This may include OCR output, detected dates, detected names, detected numbers or identifiers, expiry-related information, structured field suggestions, confidence or processing metadata, and processing status or error states.
AI-assisted processing data
Panza may use carefully selected third-party AI providers to support features such as document understanding, structured data extraction, title suggestions, field suggestions, and other smart assistance. When AI-assisted processing is used, we aim to send only the information needed to provide the requested feature. We do not use your documents to train AI models.
AI output can be wrong, incomplete, or misleading. Panza is an organization tool, not a legal, financial, medical, or government verification service. You remain responsible for checking important information before using it.
Sharing and permissions data
If you share an item with another person, Panza stores information needed to manage that sharing relationship, including the item being shared, the owner, the invited or shared-with user, the role assigned, timestamps related to sharing or role changes, and invitation or access status.
Panza's sharing model is role-based. Available roles may include Owner, Writer, and Viewer. An Owner controls the lifecycle of an item. If an Owner deletes an item, access to that item is removed for everyone it was shared with.
Subscription and purchase data
Panza may offer subscriptions through Apple In-App Purchase on iOS. Apple acts as the merchant of record and handles payment processing. We do not receive your full payment card number or full Apple payment credentials. We may receive subscription-related information from Apple, such as product identifier, subscription status, transaction identifiers, renewal status, expiry status, entitlement state, and purchase or cancellation events.
Support, technical, and local data
If you contact us for support, we may collect your email address, the content of your message, screenshots or files you choose to send, device, app, or account details needed to investigate the issue, and our responses to you.
We may collect technical information needed to operate, secure, debug, and improve Panza, such as app version, device type, operating system version, language and region settings, crash reports, diagnostic logs, server request metadata, error events, performance information, and timestamps of relevant app events.
Panza may store local data on your device to make the app faster and more reliable, including card summaries, document metadata, cached item details, cached attachment metadata, local settings, and temporary processing or sync state.
4. How we use information
We use information to create and maintain your account, authenticate you, store and display your documents, create and render cards, generate document previews, extract structured fields, provide AI-assisted suggestions, enable sharing and role-based permissions, sync data between your devices, manage subscriptions, limits, and entitlements, send account, security, and service-related messages, provide customer support, investigate bugs and crashes, prevent abuse, protect the service, improve reliability and performance, and comply with legal obligations.
We do not sell your personal data. We do not sell your documents. We do not use your documents to train AI models.
5. Legal basis for processing
If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction, we process personal data under these legal bases: contract, legitimate interests, consent, and legal obligation.
Contract applies when processing is necessary to provide Panza to you. Legitimate interests include debugging, fraud prevention, security monitoring, service improvement, protecting our rights, and protecting users. Consent applies where required by law or platform rules, and you may withdraw consent at any time. Legal obligation applies where we must process or retain information under law, tax rules, accounting rules, court orders, or regulatory obligations.
6. Service providers
Panza uses trusted service providers to operate the app and website. These may include Supabase for authentication, database, storage, and backend infrastructure; Apple for App Store distribution, TestFlight, Apple Sign In, and In-App Purchase; Google for Google Sign In if enabled; carefully selected AI providers for AI-assisted document processing if enabled; email providers for transactional emails; hosting and domain providers for the Panza website; and diagnostic, crash reporting, or analytics providers if enabled.
7. AI and OCR transparency
Panza may use OCR and AI-assisted processing to make document organization easier. AI is used to assist, not to replace your judgment. We aim to minimize the data sent for AI-assisted processing. We do not use your documents to train AI models. Extracted information may be wrong and should be reviewed. You remain in control of the final content stored in your cards and fields.
Panza does not make decisions that produce legal or similarly significant effects solely by automated processing.
8. Sharing model
Panza lets you share items with people you choose. Sharing is based on roles. A Viewer may be able to view an item but not edit it. A Writer may be able to edit metadata or fields but not share or delete the item. An Owner controls sharing, revocation, and deletion.
Panza uses reference-based sharing. This means a shared user receives access to the same canonical item, not an independent copy created by Panza. If the Owner revokes access or deletes the item, the shared user's access may be removed.
9. Device permissions
Panza may request device permissions, such as access to photos, files, camera, notifications, or other platform capabilities. We use these permissions only for the feature you choose to use. You can manage device permissions in your device settings.
10. Notifications and emails
Panza may send service-related messages, such as login codes, account notices, security notices, subscription notices, sharing or invitation messages, important service updates, and support responses. We may also send optional marketing messages if allowed by law. You can opt out of marketing messages at any time and you have the right to object to direct marketing.
11. International data transfers
Panza is operated from Hungary. Some service providers may process data in other countries, including countries outside the European Economic Area. When data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, provider contractual commitments, or other lawful transfer mechanisms.
12. Security
We use reasonable technical and organizational measures to protect your data, including authentication and access controls, transport encryption such as HTTPS/TLS, platform security features such as iOS Keychain where appropriate, database access policies, restricted access to production systems, provider-level security controls, role-based access rules, and operational safeguards for sensitive systems.
No system is perfectly secure. Panza is designed for important documents, but you should only upload documents that you are comfortable storing in a cloud-connected service.
13. Data retention
We keep information for as long as needed to provide Panza, comply with legal obligations, resolve disputes, prevent abuse, maintain security, and operate backups. When you delete content, we aim to remove it from active systems within a reasonable period. Some limited information may remain in backups, logs, or legally required records for longer.
14. Your rights
Depending on where you live, you may have rights to access your personal data, correct inaccurate personal data, delete your personal data, restrict certain processing, object to certain processing including direct marketing, receive a copy of your data, request data portability, withdraw consent where processing is based on consent, and lodge a complaint with a data protection authority.
To exercise these rights, contact support@panzaapp.com. If you are in Hungary or the European Union, you may contact your local data protection authority. In Hungary, the authority is the National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH).
15. Account deletion
You can request account deletion from within the app where available, or by contacting support@panzaapp.com. Deleting your account may remove your account data and personal content, subject to legal, security, backup, billing, and fraud-prevention retention requirements.
16. Data portability
Where technically feasible and legally required, you may request a copy of your personal data. Because Panza stores structured document information and user-uploaded files, exports may include different types of data depending on your account and app version.
17. Children
Panza is not intended for children under 13. We do not knowingly collect personal data from children under 13. If local law requires a higher age for consent to online services, you may use Panza only if you meet that age requirement or have valid parental or guardian consent.
18. Third-party links
The Panza app or website may link to third-party websites, platforms, or services. We are not responsible for the privacy practices of those third parties. You should review their privacy policies separately.
19. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice in the app, by email, or on the website where appropriate. The effective date at the top shows when this policy was last updated.
20. Contact
For privacy questions, support requests, or data protection requests, contact: