Privacy

Scope and responsibility

This notice covers krascorp.com, www.krascorp.com and the staff Dokcheck workspace at dokcheck.krascorp.com. The former portal.krascorp.com address redirects to Dokcheck; the separate staging service is for testing. Krascorp is operated by Fibuag AG, Oberneuhofstrasse 5, 6340 Baar, Switzerland. Contact martin.brun@krascorp.com for privacy questions or requests. Each fiduciary firm controls the client records it places in its workspace and decides which processing and connections to enable.

Visiting the website

The hosting systems receive your IP address, requested address and technical browser/connection information to serve and protect the website. The public homepage runs on Cloudflare Workers and uses a Cloudflare D1 database in Western Europe for contact-form and website-chat request records; Dokcheck uses Cloudflare Workers, D1 and private R2 storage. Images, scripts and styles are served with the website. The authored website and app contain no advertising analytics, marketing pixels or social-media embeds.

Contact enquiries

Use the email or phone details on the homepage to contact us. Email enquiries are received at martin.brun@krascorp.com, hosted on Microsoft 365 through GoDaddy. Submission does not subscribe you to marketing. Please do not send passwords, payment-card details or sensitive client documents. Martin Krassimir Brun is the only person authorised to read this mailbox; no automatic forwarding to other people is configured, as confirmed by the mailbox owner. Contact enquiries are kept while we handle the enquiry, its follow-up or a continuing business purpose. We review completed enquiries and delete information when there is no remaining purpose, except information needed for an identified legal obligation or claim. This is a purpose-based review policy, not an automatic mailbox purge or a promise that all provider backups disappear immediately.

Contact-form processing

If a supported website contact form is submitted, Resend sends the supplied name, reply email, phone and message as a plain-text enquiry to martin.brun@krascorp.com. The website database stores a random submission reference, hashes of the email payload and IP address, timestamps, retry counters and delivery status. It does not store your name, reply email, phone number or message text. These details do appear in the enquiry email processed by the email services. Records older than 48 hours are removed on the next valid configured submission; this is not an exact deletion deadline during periods with no submissions. Contact-form contents stay in the open page and are not saved by our contact-form code in browser storage. Provider acceptance of an email does not guarantee inbox delivery.

Firm subscription setup

The public plan setup collects the firm name, owner name, owner email, selected plan and language. It keeps an unfinished setup and random checkout-attempt reference in this tab’s session storage, so ordinary retries preserve entered details. No password or payment-card details are stored in that draft. Online checkout is not yet available. When enabled, the checkout connection will pass the required setup details to the Dokcheck billing service and Stripe; card details will be entered on Stripe’s payment page. Selecting a plan or saving a draft does not create an active paid account.

Private staff access and client records

Dokcheck is for staff; clients send documents by email and do not need software accounts. Invited staff choose their own passwords. Password verification records are hashed; account setup and reset links expire after 15 minutes and work once. Staff sessions last up to 12 hours. Authenticator credentials are encrypted and recovery codes are hashed; a configured account or firm MFA requirement must be satisfied. The app stores firm and client contacts, document requirements and periods, files and review states, correction requests, agreed fees, invoice recipients, schedules, invoice drafts, issued records, delivery states and activity history. The team owner controls file access separately for each client: edit, read files, or client-record-only access. AI retrieval follows those same restrictions. Document completeness does not confirm that accounting work has been performed; staff do not have to log work or hours.

Documents, requests and invoices

Emailed attachments and staff uploads are stored in company archives with their document and period records. Files awaiting security clearance remain unavailable to document review and AI. Automatic emails request newly missing or corrected documents only when an authorised administrator enables them. Uploaded files awaiting checks or review are not requested again. Optional invoice schedules use staff-supplied or approved agreed fees to prepare drafts; an authorised approver must approve an invoice before numbering and sending. Resend handles account, document-request and invoice email delivery. The app records recipients, delivery states and, where needed, protected email and PDF payloads. Provider acceptance does not guarantee inbox delivery.

Operational records and provider retention

The app records security and operational events; Cloudflare can also process request, security and operational metadata under its own service arrangements. Workspace data and files may be included in protected backup snapshots. Provider logs, recovery copies, mailbox messages and backups follow separate provider settings and retention terms. These are not an automatic deletion schedule for company archives. No immediate removal of every provider copy is promised.

Archives and retention

Company archives retain document and invoice history when a client is archived; restoring a client preserves that history. Archiving or withdrawing a file is not a promise of permanent erasure. Accounting, statutory retention, a dispute or another continuing duty may require records to be kept. The firm must determine the applicable retention period and authorised handling of its records. Previously sent or downloaded copies and provider backups are not recalled by an archive action.

Storage and requests

Closing a page, signing out or clearing cookies does not erase stored business records or messages in the mailbox. Expiry of an account link or session limits its use; it does not by itself promise deletion from every database or backup. Access, correction and deletion requests can be sent to martin.brun@krascorp.com. Depending on applicable law and the record involved, access, correction, deletion, restriction, objection or portability rights may apply. Records may have to be retained for accounting, legal obligations or claims; a request does not guarantee that an approved invoice can be deleted. You may contact the competent supervisory authority, including the Swiss FDPIC.

International processing

Our providers can process personal data outside Switzerland. The countries, services and transfer safeguards are explained below. A storage region for one service does not limit every network, security, support or backup operation to that region.

Cloudflare

Dokcheck uses Cloudflare’s global network; its R2 document bucket is configured with EU jurisdiction. Cloudflare also processes operational metadata in the United States and Europe. Requests can be handled at available network locations worldwide. Its standard data-processing terms include safeguards for applicable transfers, including Swiss-adapted standard contractual clauses.

• Cloudflare network locations
• Cloudflare data-processing terms

Email providers

Resend stores email content and logs in the United States regardless of the sending region. Its published data-processing terms include Swiss-adapted transfer clauses. Microsoft 365 through GoDaddy hosts our contact mailbox. The mailbox’s exact storage geography and any separate backup subscription have not been verified. We do not promise Swiss-only mailbox storage, absence of backups or immediate erasure of every provider copy. GoDaddy and Microsoft describe their international processing and applicable transfer safeguards in the linked terms.

• Resend processing and retention
• GoDaddy Microsoft 365 terms
• GoDaddy data-processing terms
• Microsoft data locations and transfers

Microsoft 365 and Google Workspace intake

A firm administrator configures and authorises a separate read-only mailbox connection through Microsoft 365 or Google Workspace. Microsoft requests basic profile, read-mail and offline access; Google requests read-only Gmail access. The connection does not modify the source mailbox or obtain permission to send through it. The app stores the mailbox address, selected folder or label, import start date, sync state and encrypted authorisation credentials for the firm. Import stores message sender, subject, readable message text, dates and attachment metadata and copies supported attachments into private storage. Only the firm owner can enable automatic filing of clear company, document-type and period matches; private senders and ambiguous content remain subject to the filing and review rules. Disconnecting removes the stored connection credentials and stops future import; it does not erase previously imported records, archive files or the provider’s messages. Revoke the provider grant in the Google or Microsoft account or administrator settings. Provider processing and retention depend on the connected account and its organisation. Google Workspace data-processing terms and Microsoft data locations and transfers describe provider arrangements.

Client setup drafts and list imports

The three-step client setup saves unfinished company/contact details, document requirements and any optional billing settings to the server. In the app, these drafts are private to their creating staff member within the firm. They remain inactive until explicitly reviewed and activated and do not start document requests or invoice schedules. Firm presets store document requirements and relative periods; they do not copy client contacts or invoice fees. Excel .xlsx and CSV client lists are parsed in the browser for column matching and duplicate review. Saving selected rows sends their checked setup fields and import-source metadata to the server; the original spreadsheet is not sent to an external AI service.

Krascorp AI and requested changes

AI processing is separate from website hosting. It is automatically available in an active workspace when the configured connection is ready; the owner can pause or resume it. Background document reading and staff requests send permitted client records, email information or security-cleared document content to OpenAI, using GPT-6 Luna or GPT-6.1 Sol. Retrieval stays within the active firm, the selected or clearly identified client and the staff member’s access rights. Unclear client or action matches need clarification. Clear typed staff instructions can save permitted client-detail or document-requirement changes, add attachments or create generated TXT drafts. The chat shows the recorded changes; generating a draft does not make it client-supplied evidence. Added and generated files remain subject to their own security checks. Existing client-request settings control email delivery; an authorised person must still approve an invoice before numbering and sending. AI cannot grant access, approve or issue invoices, or invent fees. The app records processing attempts, known usage, routing, pause settings and executed changes; completed answers can be cached in encrypted form for 24 hours. API requests set store:false; this does not promise zero provider retention or Swiss-only processing. The firm remains responsible for its basis for processing, provider terms and client-data requirements. OpenAI API data controls explain provider storage and retention options.

Public Krascorp AI website chat

The homepage chat answers questions about Dokcheck features, pricing and setup using public product information. It has no access to staff sessions, company archives, invoices, inboxes or client records. When you send a question, it is processed separately by OpenAI. Do not include passwords, private client information or document contents. The browser keeps the visible conversation only in this open page; chat code does not use cookies or browser storage.

The website stores a random request reference in hashed form, hashes of the question and network address, timestamps and processing status for duplicate prevention and rate limits. A reply can be cached in encrypted form. After 48 hours, cached replies and question/network hashes are cleared on the next valid configured request; this is not an exact deletion deadline when there are no further requests. An anonymous hashed request reference, timestamp and status are retained to prevent an old request from being charged again. The protected product-answer service uses the existing OpenAI connection, with no private workspace records or action tools. Requests set store:false; this does not promise zero provider retention. OpenAI processing and retention remain subject to its API data controls. OpenAI API data controls.