Privacy Policy

Last updated: September 20, 2026

1. Data Controller

The data controller for this Service is:

  • Company Name: DocProcessor
  • Registered Address: [Company Registration Address]
  • Privacy Contact Email: privacy@docprocessor.com
  • Data Protection Officer: [Name/Contact, or "Not applicable"]

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password (encrypted), and other registration fields
  • Payment Information: Transaction amount, payment status. We do not store complete card numbers — card data is handled by our payment processor (see Section 5)
  • Communication Records: Emails, support tickets, and feedback you send to customer support
  • Documents: PDF, Excel (.xlsx, .csv), and Word (.docx) files you upload for processing

2.2 Information We Automatically Collect

  • Device & Network: IP address, device model, operating system, browser type, timezone
  • Usage Behavior: Page visits, feature usage, operation logs, session duration
  • Log Data: Request timestamps, error logs, performance data

3. How We Use Your Information

Purpose Legal Basis
Providing and maintaining the ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation
Marketing communications (optional)User consent

We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to a specific individual.

4. Cookies and Tracking Technologies

Type Purpose Can be disabled
Strictly necessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes
Marketing (optional)Targeted advertising and performance measurementYes

We use analytics tools to understand how you use our Service. You can adjust preferences through your browser settings or our Cookie Preference Center.

5. Sharing and Disclosure of Personal Information

We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share information in the following circumstances:

  • Service Providers: Cloud computing, payment processing, customer support, and analytics vendors bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS-compliant payment processor, Waffo Pancake, and is not stored on our servers
  • Business Partners: [If applicable, describe the type of partnership and scope of data; otherwise this item does not apply]
  • Legal and Regulatory Requirements: As required by law, court order, or legitimate government request
  • Business Transactions: In the event of a merger, acquisition, or similar transaction, with advance notice and continued protection obligations
  • With Your Consent: For any other purpose beyond those described above, only with your explicit prior consent

6. Data Security Measures

  • Transmission Encryption: TLS / HTTPS
  • Storage Security: Passwords and sensitive data are encrypted or hashed
  • Access Control: Principle of least privilege; employees sign confidentiality agreements
  • Regular Security Audits: Periodic security audits and vulnerability scanning

In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery. Please keep your account credentials secure and do not share them with others.

7. Data Retention Period

Data Type Retention Period Disposal Upon Expiry
Account informationDuring active period; 90 days after account deletionDelete or anonymize
Transaction recordsAs required by law (typically 7 years)Delete or archive
Customer support records3 yearsSecure deletion
Security audit logs12 monthsSecure deletion
Uploaded documentsUntil you delete them or your account is deletedSecure deletion

8. Your Data Rights

To exercise the following rights, contact us at privacy@docprocessor.com. We will process your request within 30 calendar days.

Right Description
Right to be informedKnow what data we collect and how we use it
Right of accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest deletion of data under specific conditions
Right to restrict processingPause data processing under specific conditions
Right to data portabilityObtain your data in a machine-readable format
Right to objectObject to processing based on legitimate interest or marketing
Right to withdraw consentWithdraw consent for processing based on consent

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to our Service via email, SMS, or in-app notifications. You can opt out at any time: click the "unsubscribe" link in the email, disable marketing notifications in Account Settings, or contact us. Opting out does not affect service-related notifications (e.g., billing, security reminders).

10. International Data Transfers

Our servers and partners may be located in various regions, including Singapore and the United States. For cross-border transfers, we protect your data through:

  • Data processing agreements incorporating Standard Contractual Clauses (SCCs)
  • Transfers only to recipients with equivalent protection levels
  • Other safeguards such as adequacy decisions or Binding Corporate Rules

11. Children's Privacy

This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately at support@docprocessor.com, and we will promptly delete it.

12. Third-Party Links and Services

This Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for third parties' data practices, and we recommend reviewing their policies before using their services.

13. Changes to This Policy

If we make material changes to this Policy, we will notify you at least 15 days in advance via platform notice or your registered email address, and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the revised Policy.

14. Contact Us