Privacy Policy

Last updated: May 2025

1. Who We Are

Gritsa Tech Ltd ("we", "us", "our") operates DocsPapa at docspapa.com. We are registered in England and Wales. For privacy enquiries: hello@docspapa.com.

2. Data We Collect

Account data: name, email address, phone number (optional)
Document content: text you enter when creating documents
Usage data: pages visited, features used, IP address, browser type
Payment data: billing details processed by Stripe or Razorpay (we do not store card numbers)

3. How We Use Your Data

To provide and improve the Service
To process payments and manage subscriptions
To send transactional emails (document exports, e-signature requests)
To comply with legal obligations

4. Legal Basis (UK GDPR)

We process your data on the basis of (a) contract performance — to deliver the Service you signed up for; (b) legitimate interests — to improve our products and prevent fraud; and (c) consent — for optional marketing communications.

5. Data Sharing

We share your data only with:

Stripe / Razorpay — payment processing
Resend — transactional email delivery
Vercel / Neon — hosting and database infrastructure
Browserless — PDF generation (document content only)

We do not sell your personal data.

6. Data Retention

We retain your account data for as long as your account is active. Document content is retained until you delete it. Payment records are kept for 7 years as required by UK law.

7. Your Rights

Under UK GDPR you have the right to access, rectify, erase, restrict, or port your data. To exercise these rights, email hello@docspapa.com.

8. Cookies

We use essential cookies for authentication and preference cookies to remember your settings. See our Cookie Policy for details.

9. International Transfers

Our infrastructure providers may process data outside the UK/EEA. Where this occurs, we rely on Standard Contractual Clauses or the UK adequacy decision.

10. Changes

We will notify you of material changes to this policy by email or in-app notice.