Website Privacy Notice

1. Scope and responsibility

1.1This Notice explains how DocuPrive, Inc. (“DocuPrivé”, “we”, “us”) handles personal information connected with our public website at docuprive.com and www.docuprive.com, our optional product-update emails, and enquiries sent to us. Our correspondence address is 8 The Green, Dover, DE 19901, United States. Privacy questions and requests can be sent to support@docuprive.com with “Privacy” in the subject line.

1.2DocuPrivé is being developed as document custody and lifecycle infrastructure for professional teams. This website introduces that work. It does not provide customer accounts, accept document uploads, take payments or give access to a document workspace, and subscribing to product updates does not create any of those relationships.

1.3We decide how and why the website, subscription and enquiry information described here is processed, and we are responsible for it as controller. When DocuPrivé’s document services become available, customers will generally decide how documents placed in those services are used, and separate service terms and data-processing arrangements will apply. Visiting this website does not start that relationship.

1.4This Notice is for information. Where we need your consent, we ask for it separately and specifically.

2. Information you provide

2.1To receive product updates, you give us one item of personal information: your email address. Alongside it we record the consent wording and version you were shown, when and where the request was made, whether you confirmed it, and any later withdrawal. The consent box is never pre-ticked, and you can use the website without subscribing.

2.2If you email us, we receive your address, your message and any attachments, the usual email header information, and our replies. Please send only what your enquiry needs, and do not send passwords, identity documents or confidential client files by email or through the website.

2.3Joining the update list never requires payment details, documents, professional credentials or proof of identity. If someone enters your address without your permission, you can ignore the confirmation email; no updates are sent unless the address is confirmed.

3. Technical and security information

3.1When your browser requests a page, our hosting and delivery provider receives technical information such as your IP address, the page requested, the time, your browser and device type, and connection details needed to deliver and protect the website.

3.2When you use the sign-up form, an automated anti-abuse check assesses technical signals from your browser before we pass your request to our email provider. If the check fails, expires or is unavailable, the form will not submit. This only protects the form; it is not a judgement about you.

3.3To limit repeated or automated sign-ups, we keep short-lived counters linked to keyed, pseudonymised versions of the email address and IP address used. These security records are kept separately from the update list. Pseudonymised information can still be personal information, and we treat it as such.

3.4Our own application does not record raw email addresses, IP addresses, form contents or security tokens in its logs. Our providers’ own processing is described in section 5.

4. Purposes and legal bases

4.1We use technical information to deliver and protect the website, subscription information to confirm, send and stop product updates as you choose, and correspondence to answer enquiries and manage any resulting business relationship.

4.2Where the law requires a legal basis: product-update emails rely on your consent. Running and securing the website, preventing abuse of the form, administering the update service and handling ordinary correspondence rely on our legitimate interests in operating a reliable website and responding to people who contact us, balanced against your rights and reasonable expectations. Some processing may also be needed to take steps you request before entering a contract, to meet a legal obligation, or to establish, exercise or defend legal claims.

4.3We do not sell information collected through this website, share it for cross-context behavioural advertising, or use subscription or enquiry information to train AI models. We will not use this information for a materially new purpose without first giving notice and, where required, obtaining fresh consent.

5. Hosting, security and email providers

5.1We use service providers for specific functions: website hosting and delivery, anti-abuse protection, managing and sending product-update emails, and our business mailbox. Each provider receives only what its function requires and is bound by appropriate contractual terms. We remain responsible for our own obligations.

5.2Cloudflare, Inc. hosts and delivers the website and provides its security services, including the sign-up endpoint, the short-lived anti-abuse records described in 3.3, and its Turnstile anti-abuse check. Brevo manages the product-update list and sends confirmation and update emails. A business email service receives correspondence sent to us.

5.3Turnstile runs in your browser and communicates directly with Cloudflare, which processes technical signals to protect the form and, as described in Cloudflare’s Turnstile privacy terms, to improve its bot detection.

5.4Our email provider receives your email address with the consent and subscription information in 2.1, and handles confirmation links, delivery results and unsubscribe records. It may receive technical information when you open a confirmation or unsubscribe link.

5.5The website does not use analytics, advertising pixels, session recording, chat widgets or social-media embeds. Emails sent by our email provider contain standard links and a small image it uses to measure opens and clicks. We have set our account so that this is not recorded for subscribers who have not agreed to it, and we do not use opens or clicks to profile anyone. If you follow a link to another service, that service’s own privacy practices apply.

6. Other disclosures and international processing

6.1We may also share relevant information with professional advisers bound by confidentiality; where the law requires it; where necessary to protect rights, safety or security; or in connection with a genuine business transaction under confidentiality and purpose restrictions. Any successor must continue to respect the choices you have made.

6.2Our providers and their support teams may process information in countries other than your own, including Australia, Canada, Denmark, the European Union, Indonesia, Israel, Japan, Malaysia, Mexico, New Zealand, the Republic of Korea, Singapore, South Africa, Sweden, Switzerland, Thailand, Ukraine, the United Arab Emirates, the United Kingdom, the United States and Vietnam. Where the law requires safeguards for an international transfer, we put appropriate safeguards in place before the transfer, such as an adequacy decision or approved contractual clauses. You can ask us for details of the recipients, locations and safeguards that apply.

7. Product updates, confirmation and withdrawal

7.1Product updates cover DocuPrivé’s development, platform news and launch announcements. They are optional. You subscribe by ticking a separate consent box and then confirming through the email sent to your address. An address is not added to the update list until it has been confirmed.

7.2You can withdraw consent at any time using the unsubscribe link in any update email or by emailing support@docuprive.com. Withdrawal stops further updates. It does not affect anything done before you withdrew, or our ability to answer a separate enquiry from you.

7.3We keep a minimal suppression record so that an unsubscribe, complaint or delivery block is honoured. Submitting the sign-up form again does not reverse a withdrawal; if you want to resubscribe after unsubscribing, contact us.

7.4Unsubscribing continues to work even when we pause new sign-ups. We keep product updates separate from replies to privacy requests, security notices and enquiries, and we do not treat an enquiry, a website visit or any future document invitation as consent to marketing.

8. How long information is kept

8.1We keep information only as long as needed for the purpose it was collected for, unless a legal requirement, an unresolved security incident or a legal claim requires us to keep it longer, and then only to the extent needed.

8.2Unconfirmed sign-up requests are deleted after 30 days if they have not been confirmed. Confirmation links may expire sooner.

8.3Confirmed subscription information is kept while you continue to receive updates and the update service operates. When you withdraw, we stop sending updates and keep only the suppression record described in 7.3, for as long as needed to avoid contacting you again.

8.4Enquiries are kept while we deal with them and afterwards only as long as needed for follow-up, our records, or a specific legal obligation or claim. How long depends on the subject of the enquiry and whether it led to an ongoing relationship.

8.5Anti-abuse counters cover periods of up to 24 hours, and expired records are normally deleted from our active systems within 48 hours. Provider logs and backups follow those providers’ own retention periods, and information restored from a backup is used only for recovery, with suppression and deletion choices reapplied. Our email provider deletes delivery logs after one month and does not keep copies of the emails it sends for us.

8.6Records of consent, withdrawal and privacy requests are kept only as long as needed to show what was requested and how we responded.

9. Cookies, browser storage and similar technologies

9.1The website does not use advertising cookies, analytics or cross-site tracking identifiers, and it does not require you to log in.

9.2Our own code sets no cookies. Cloudflare’s security services may set strictly necessary cookies or browser storage to protect the website and the sign-up form, for example when its bot protection or Turnstile check is active. When we tested the sign-up form, Cloudflare Turnstile used one local-storage entry named cf.turnstile.u under challenges.cloudflare.com to keep state for its anti-bot check, and we observed no cookies. Browser local storage has no automatic expiry; it may remain until the provider removes it or you clear it in your browser. We will update this section if our configuration changes, and we will ask for your consent before using any cookie that is not strictly necessary.

9.3You can limit cookies and scripts through your browser settings. The website remains readable without JavaScript, but the sign-up form needs JavaScript for its anti-abuse check and will not submit without it. We honour legally recognised opt-out preference signals where they apply.

10. Your rights

10.1Depending on the law that applies to you, you may have the right to know how your information is processed; to access or receive a copy of it; to correct it; to have it deleted; to restrict or object to its processing; to receive it in a portable format; to withdraw consent; to opt out of particular uses; and to appeal a decision about your request.

10.2To make a request, email support@docuprive.com with “Privacy” in the subject line, telling us which subscription or enquiry it concerns and what you would like us to do. You do not need an account. We will verify requests proportionately and will not ask for identity documents for routine requests.

10.3If someone makes a request on your behalf, we will check their authority. We will respond within the time the law requires and explain any refusal, extension or appeal route that applies.

10.4You can object to direct marketing at any time. Where we rely on legitimate interests, you can object on grounds relating to your particular situation where the law gives you that right.

11. Regional rights and complaints

11.1If EEA or UK data-protection law applies, you also have the right to complain to a supervisory authority, in particular in the country where you live or work or where an alleged infringement occurred. In the UK, this is the Information Commissioner’s Office. Our representative in the United Kingdom under Article 27 of the UK GDPR is BlackCores and Partners LLP, First Floor Office, 3 Hornton Place, London W8 4LZ, United Kingdom (info@blackcores.com). Product-update sign-ups are not yet open in the European Economic Area.

11.2If a United States state privacy law applies to our processing of your information, you have the rights that law provides, including the right not to be discriminated against for exercising them.

11.3If you are in Hong Kong, you have rights of access and correction under the Personal Data (Privacy) Ordinance and may complain to the Office of the Privacy Commissioner for Personal Data. Requests and complaints from Canada, Singapore, Switzerland and other jurisdictions are handled under the law that applies to them.

11.4You may use any available statutory complaint route without first using ours. Our location in the United States does not limit the privacy rights you have under your local law.

12. Security and automated anti-abuse checks

12.1We protect information with safeguards appropriate to the risks, including restricted administrative access, protected credentials, limited-purpose processing and review of security issues. We assess our providers for the functions they perform. We do not publish detailed security configuration where doing so would weaken it.

12.2No website or email system is completely secure. If a security incident affects your information, we will notify you and the relevant authorities where the law requires.

12.3Automated anti-abuse checks may block or delay a sign-up. They exist only to protect the website and prevent unwanted email, and are not used to make decisions about you with legal or similarly significant effects. You can contact us if you believe a sign-up was wrongly blocked.

13. Children and sensitive information

13.1The website and product updates are intended for adults working with professional or business documents, and are not directed to children. Please do not send sensitive personal information through the sign-up form or by email. If you believe a child or anyone else has given us information they should not have, contact us and we will deal with it promptly.

14. Future document services, integrations and AI

14.1DocuPrivé’s development plans include document custody, controlled disclosure, retention, review, legal holds, disposal and lifecycle records. These functions are not available through this website.

14.2When a document service becomes available, we will explain before any processing starts what information it uses, who is responsible for it, which providers are involved, where it is processed and how long it is kept.

14.3Subscribing to updates, visiting this website or reading this Notice does not authorise any processing of your documents, connection to your systems, use of AI on confidential material, or transfer of the update list into a customer system. Any such processing will require a specific feature, terms and instruction.

15. Public pages and search services

15.1Our public marketing pages and this Notice are intended to be found and summarised by search engines and AI assistants. Subscription records, correspondence, confirmation links and any private systems are not public and are not made available to them.

15.2Search engines and AI services decide independently how they rank, summarise or store public content, under their own policies.

16. Changes and contact

16.1We will update this Notice when our processing or legal requirements change, and show the effective date at the top. We will give appropriate notice of material changes, and will not start a new consent-based use without your consent. Previous versions are kept on record.

16.2For privacy questions, requests or complaints, email support@docuprive.com with “Privacy” in the subject line, or write to DocuPrive, Inc., 8 The Green, Dover, DE 19901, United States.