Legal
Privacy Policy
How we handle your data with care.
This Privacy Policy describes how Docseta collects, uses, and shares information. It applies to all users and is intended to meet Canadian privacy law requirements (including PIPEDA and provincial privacy laws) and US state privacy laws (including CCPA/CPRA for California).
Notice at collection
We collect account data (email and login details), documents you upload, extracted fields such as expiry dates, and contact data like email and Telegram identifiers. We collect this data to provide the service, run OCR and document classification, send notifications, and secure the platform. We share data with service providers listed below. We retain data while your account is active, and delete it on request subject to backup retention.
Sensitive Personal Information
Docseta processes Sensitive Personal Information, including government IDs, immigration documents, scanned documents, extracted expiry dates, and contact information (email and Telegram). We do not use sensitive personal information for purposes other than providing the Service.
How we use information
We use information to create and manage accounts, store documents, perform OCR and classification, deliver email and Telegram notifications, process payments, prevent abuse, and maintain service security and reliability.
Third-party processors
We use the following processors solely to operate the Service: Google (Gemini OCR and Cloud services), Google (Gmail API for email delivery), Telegram (notifications), payment processors (Stripe or LemonSqueezy), and analytics/monitoring providers if enabled. We do not sell or share personal information.
Cross-border data transfers
Your data may be stored or processed in Canada, the United States, or other countries where our providers operate. By using the Service, you consent to these transfers.
Data retention and deletion
We retain data while your account is active and as needed to provide the Service. You can request deletion through the Support page. Backups may persist for a limited time and are deleted on a reasonable schedule.
Automated processing
OCR and document classification are automated and may be inaccurate. You are responsible for verifying all extracted data and document types.
Security
We use reasonable safeguards to protect data, but no system can guarantee absolute security. Please use a strong password and keep your credentials and Telegram linkage private.
Canadian users (PIPEDA)
We process personal information based on consent and to perform our contract with you. You may request access, correction, or deletion of your personal information by contacting Support. We will respond in accordance with applicable Canadian privacy laws.
US state privacy rights (CCPA/CPRA)
If you are a California resident or otherwise covered by US state privacy laws, you may have the right to know, delete, correct, and limit the use of sensitive personal information. You may also opt out of the sale or sharing of personal information. We do not sell or share personal information. We do not use sensitive personal information for purposes other than providing the Service. We do not discriminate against users who exercise these rights.
Data breach notification
We will provide notification of a data breach as required by PIPEDA and applicable US state laws.
Children
Docseta is not intended for anyone under 18 years of age.
Updates
We may update this Privacy Policy from time to time. We will post the updated policy here and may provide additional notice where required.
Contact
For privacy questions or requests, contact support through the Support page.
