General Data
Protection Regulation.

We provide a standard DPA to any customer processing data of EU/EEA citizens. The Enterprise plan receives a signed DPA as part of the contract. Other plans receive a DPA on formal request — contact@consultor.app.

Each category of processing has an explicit, documented and auditable lawful basis:

We don't currently offer a dedicated EU hosting region. If your data residency obligations require one, talk to contact@consultor.app before signing.

When data moves outside the EU — such as processing by AI models hosted in the US — we use Standard Contractual Clauses (SCC) approved by the European Commission. Anthropic and OpenAI operate under no-train agreements: your data never feeds model training. A Transfer Impact Assessment (TIA) is available on request for Enterprise customers.

EU citizens have every right guaranteed by the GDPR:

• Access to personal data (Art. 15).
• Rectification of inaccurate data (Art. 16).
• Erasure — the right to be forgotten (Art. 17).
• Restriction of processing (Art. 18).
• Portability in a structured format (Art. 20).
• Objection to processing (Art. 21).
• Not being subject to automated decision-making without human intervention (Art. 22).

Requests answered within 30 days — most within 72h. Send to contact@consultor.app.

EU citizens have the right to lodge a complaint with the competent supervisory authority in their country of residence. Before that, we ask you to reach out directly to contact@consultor.app — most cases are resolved within 72h without escalation.