Privacy Policy

Effective Date: May 2026

1. What Data We Collect

Account Data

Your email address, used to communicate with you about your orders and account.

Order Data

Company name, product description, tech stack, and business model as submitted in the order form. This information is used to generate your documents.

Payment Data

Payments are processed by Stripe. We do not store your card numbers or payment credentials. Stripe handles all payment data under their own privacy policy.

Usage Data

Pages visited, time spent on pages, browser type, and IP address. Collected automatically to help us understand how our service is used.

Cookies

We use only essential cookies for session management. We do not use tracking or advertising cookies.

2. How We Use Your Data

  • Generate the documents you ordered
  • Process your payment via Stripe
  • Send order confirmations and delivery notifications
  • Improve our service and AI models (using anonymized/aggregated data only)
  • Respond to your support requests and questions about orders

3. Who We Share Data With

We share your data only with the third-party service providers necessary to operate DoxPak:

Stripe— Payment processing
Vercel— Website hosting and infrastructure
Supabase— Database and data storage
Resend— Transactional email delivery

We do not sell your personal data. Ever.

4. Data Retention

  • Order data is retained for 2 years after purchase
  • Account data is retained until you request deletion
  • You may request early deletion at any time by emailing privacy@doxpak.com

5. Your Rights

Under GDPR and CCPA, you have the following rights:

  • Right to access your personal data
  • Right to correct inaccurate data
  • Right to delete your data
  • Right to opt out of marketing communications
  • Right to request data portability

California residents have additional rights under CCPA, including the right to know what data is collected, the right to delete, and the right to opt-out of data sale (we don't sell data).

To exercise any of these rights, email privacy@doxpak.com.

6. Security

We protect your data with TLS encryption in transit, encryption at rest, and strict access controls. We follow industry best practices to keep your information secure.

7. Children

DoxPak is not intended for users under 13 years of age. We do not knowingly collect data from children. If you believe a child has submitted information to us, contact us and we will promptly delete it.

8. International Transfers

Your data is processed and stored in the United States. By using DoxPak, you consent to transfer of your data to the US, which may have different privacy laws than your country.

9. Changes to This Policy

We will provide at least 30 days notice via email before any material changes to this Privacy Policy take effect.

10. Contact

For privacy questions or to exercise your rights, contact us at privacy@doxpak.com.