English · Русский · Español · Français · Deutsch · Italiano · Українська · Română

Reexo — Privacy policy

Last updated: 23 October 2026. This is a test launch of the Reexo bot in Telegram and WhatsApp, which reads tachograph printouts and checks traffic fines and payment demands.

Who is responsible

The data controller is Yan Nezamutdinov, a private individual resident in Hungary. Contact: yan@reexo.ai.

What we process and why

• Photos, PDF files and texts you send. We use them to read the printout or check the document and answer you. Files are processed in an isolated environment. Message texts are deleted immediately after the answer. Photos and PDF files (cleaned, without metadata) and the text of our answer are kept encrypted on our server for 14 days, so that we can check whether our answers were correct and fix mistakes; after that they are deleted automatically. Only we (the controller) look at them, and only for this purpose. If you accepted the terms before 23 October 2026 and did not agree to this, or declined, files are deleted immediately after the answer (at the latest within one hour if processing fails).
• Photos of tachograph printouts. A printout shows your name, driver card number and vehicle registration. The photo is read by Anthropic (under a data processing agreement): the model copies only the activity lines (type of activity, start time, duration), the day totals, the date and the countries. We do not ask for or store your name, card number or registration in our database. The activity lines without names and numbers are kept for at most one hour — while we wait for yesterday's printout or your choice of country — and are then deleted. The check results contain only the fact of the check, its outcome, the country, processing time and cost. The calculation is guidance under EU Regulation 561/2006 based on the printout; it does not replace the tachograph records or official advice.
• Check results without personal data: country, type of sender (authority, toll operator, private company, debt collector), stage, amounts, deadlines, signs of forgery, processing time and cost. Names, addresses and number plates are not stored. A case number is stored only as a one-way hash to recognise repeated documents.
• Your Telegram account: your Telegram ID (stored encrypted), the interface language, your chosen answer language, the campaign link you came from, the time of your first and last message, and your consent. We need this to answer you, apply limits and measure how the service is used.
• Your WhatsApp account: if you write to us on WhatsApp, we receive your phone number and profile name from WhatsApp (Meta). We store the phone number only in encrypted form (like the Telegram ID) — to answer you, apply limits and carry out deletion. We do not store the profile name. If you came from a WhatsApp ad (Click-to-WhatsApp), we store the ad label, without any data about you. Photos, PDF files, texts and voice messages from WhatsApp are processed in the same way as those from Telegram (see the paragraphs above and the section on feedback) and are deleted in the same way.

Legal basis: performance of the service you request (Art. 6(1)(b) GDPR) and our legitimate interest in protecting the service from abuse and improving it (Art. 6(1)(f) GDPR). Keeping files for 14 days to check answers: our legitimate interest in the quality of the service (Art. 6(1)(f) GDPR); you can object at any time — /delete removes the stored files immediately.

Who else sees the data

To read documents and printouts we use processors bound by data processing agreements: Mistral AI (France, text recognition) and Anthropic (USA, extraction of fields, image classification and reading tachograph printouts; transfers under Standard Contractual Clauses). They process the data only to give us the result. Telegram and WhatsApp (Meta Platforms Ireland Ltd.) deliver the messages; for WhatsApp, the WhatsApp Business terms and policy apply. Files you send on WhatsApp are downloaded by us from Meta's servers only to check them. We do not sell data and do not use it for advertising.

How long

Message texts: until the answer (maximum one hour). Photos, PDF files and the text of our answer: 14 days (otherwise until the answer, see above). Tachograph activity lines without names and numbers: at most one hour. Check results and account data: until you delete them or for as long as the test launch lasts. Server logs contain no personal data and are kept for up to 90 days.

Manual review — only with your consent

If we are not sure about an answer, the bot offers to send the photo to our team for a manual check. Only if you tap «Send for review», the cleaned photo (without metadata) is kept encrypted until our team has checked it, for at most 30 days, and is then deleted; we send you the updated answer. If you decline or don't answer within an hour, it is deleted. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with /delete.

Voice and text feedback

If you send a voice message or use /feedback, we treat it as feedback about the service. A voice message is transcribed by Mistral AI (France) under our data processing agreement, and the recording is deleted right after transcription. Before any further processing, our code replaces names, phone numbers, e-mail addresses, licence plates, IBANs, addresses and long numbers in the text with placeholders. Anthropic then classifies the masked text (type of request, short summary, country). We keep only the masked text and the classification, for up to 90 days or until you send /delete. Legal basis: your consent, given when you send feedback (Art. 6(1)(a) GDPR).

Your rights

Send /delete in the bot, in Telegram or WhatsApp, to delete all data about you immediately. You can also ask for access, correction or deletion at yan@reexo.ai, and complain to a data protection authority (in Hungary: NAIH, naih.hu).

How to delete your data

• Telegram: send /delete to the bot and tap the confirmation button. All data about you (encrypted ID, language, check results, stored files, photos under manual review, feedback) is deleted immediately.
• WhatsApp: send /delete in your chat with Reexo and confirm with the button. The same data is deleted, including the encrypted phone number.
• By e-mail: write to yan@reexo.ai from the address or number you used the service with. We will delete the data within 30 days and confirm by reply.

After deletion, only an anonymous note that a deletion took place remains (no ID, no number). The messages themselves stay with Telegram/WhatsApp on your device — delete them in the app.

Important

The bot checks codes, account numbers and links on the document. It cannot confirm that a case really exists and does not replace legal advice. Contact the authority using the contacts on its official website if in doubt.