GDPR & data protection

Your documents stay in the EU. You stay in control.

HelpRange is a European company. Documents you upload are encrypted and stored in Frankfurt, Germany. You decide who can open them, for how long and what they can do – and you can see every view and revoke access at any time. We sign a data processing agreement (DPA) with your company.

HelpRange access control for a document
Data location

Where your data is stored

We tell you exactly where each kind of data lives – no "EU-hosted" small print.

DataWhereHow it is protected
Documents you upload (and their converted versions)Amazon Web Services, Frankfurt, Germany (eu-central-1)AES-256 encryption at rest, private storage, TLS in transit; opened only through HelpRange's viewer under the rules you set
Account data, link and data room settingsAmazon Web Services, United States (us-west-2)Access limited to HelpRange; TLS in transit; transfer under the EU-US Data Privacy Framework and Standard Contractual Clauses
Viewing analytics (viewer email, IP address, country, pages and time read)Amazon Web Services, United States (us-west-2)Shown only to your team; collected only when your link settings ask for it (e.g. "require email")
Transactional emails (verification codes, notifications)Amazon SES, United States (us-west-2)Sent over TLS; contain links, not your documents
Payments for your subscriptionStripeHelpRange never stores card numbers
Controls for controllers

GDPR tools built into every link and data room

Under GDPR you are the controller of the personal data in your documents. HelpRange gives you the means to share only what is needed, with only the people who need it.

Access only for chosen people

Allow specific email addresses with email verification, add a password, restrict IP addresses or allow one viewer at a time.

Revoke and expire

Set an expiry date or a view limit, revoke a link for one person or everyone, or replace a document after sending it.

Full audit trail

See who opened what, when, from which IP and country, which pages they read – and refused access attempts.

No uncontrolled copies

Block downloading, printing and forwarding, add a dynamic watermark with the viewer's email and use screenshot protection.

No ad trackers for recipients

The pages where your recipients read documents load no advertising pixels or third-party analytics.

Deletion

Deleting a document disables it and all its links immediately. Ask us and we permanently erase stored copies and related data.

Data processing agreement

We sign a DPA with your company

For the documents and recipient data you share, HelpRange processes personal data on your behalf as a processor (Article 28 GDPR). Our DPA covers the subject and duration of processing, security measures, subprocessors, assistance with data subject requests, breach notification and deletion or return of data at the end of the service.

Request the DPA

Who is who

  • Your company – controller of the documents and of your recipients' data
  • HelpRange – processor of that data; controller only of your account and billing data
  • Subprocessors – listed below; we inform customers before adding a new one
Subprocessors

Who processes data for HelpRange

ProviderPurposeLocation
Amazon Web Services (S3)Storage of uploaded documentsFrankfurt, Germany
Amazon Web Services (hosting, database)Running the application, account data, settings and viewing analyticsUnited States
Amazon Web Services (SES)Sending verification codes and notificationsUnited States
StripeSubscription paymentsEU / United States
HotjarUsage analytics of the HelpRange web app for logged-in users (not on recipient pages)EU
Google Analytics, MetaAnalytics and advertising on the HelpRange marketing website only (not in the app, not on recipient pages)United States
Your rights

Data subject requests

If you are a recipient of a document shared through HelpRange, the company that shared it with you is responsible for your data – contact them first. We help our customers answer such requests.

For access to, correction or erasure of data that HelpRange controls (your HelpRange account), email hello@helprange.com. We respond within one month, as GDPR requires. You can also lodge a complaint with your data protection authority; in Poland this is the President of the Personal Data Protection Office (UODO).

FAQ

GDPR at HelpRange – questions

Is HelpRange GDPR compliant?

HelpRange is a European company and acts as a data processor for the documents and recipient data you share. We sign a data processing agreement (DPA) under Article 28 GDPR, store documents in Frankfurt, Germany, and give you the controls you need as a controller: access limited to chosen people, revoking access, expiry dates and a full audit trail.

Where are documents stored?

Uploaded documents are encrypted with AES-256 and stored in Amazon Web Services in Frankfurt, Germany (region eu-central-1). The application, account data and viewing analytics run on Amazon Web Services in the United States (region us-west-2).

Do you sign a DPA?

Yes. Email hello@helprange.com with your company name, address and registration number and we will send you our data processing agreement to sign.

Is personal data transferred outside the EU?

Documents stay in the EU. Account data, link settings, viewing analytics and transactional emails are processed in the United States by Amazon Web Services, under the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Are recipients tracked by advertising tools?

No. The pages where recipients open your documents and data rooms do not load advertising pixels or third-party analytics. The view analytics are collected by HelpRange for you, the sender, and are not shared with anyone else.

A data room for European teams

Share confidential documents with documents stored in the EU, full control after sending and page-by-page analytics.

EU virtual data room