Privacy Notice

Docsy.uk ("Docsy", "we") operates the Docsy service at docsy.uk. For privacy questions or to exercise your rights, email privacy@docsy.uk.

• Account data (name, email address, login credentials, authentication provider identifiers) — to create and secure your account. Legal basis: performance of our contract with you.
• Document content and metadata (files you upload, file names, page counts, tool used, AI prompts and outputs) — to run the tool you requested and to show your history. Legal basis: performance of our contract.
• Usage and telemetry (pages visited, features used, session recordings and heatmaps via analytics tools, device type, browser, IP address) — to keep the service secure, diagnose faults and improve the product. Legal basis: legitimate interests, and consent where required for non-essential cookies.
• Support messages — to answer your questions. Legal basis: legitimate interests and contract performance.
• Subscription status (plan, renewal state, subscription identifiers) — to give you access to Premium features. Legal basis: contract performance and legal obligation.
• Marketing communications — only where you have opted in. Legal basis: consent, which you can withdraw at any time.

Many Docsy tools run entirely in your browser, so those files are never sent to our servers. Where a tool requires server or AI processing, the content is transmitted securely, processed for that request, and not used to train third-party models. Files you choose to store in your workspace remain until you delete them or your account is closed.

• Service providers / subprocessors — hosting, database and authentication infrastructure, AI processing providers, analytics and product-insight tools, and email delivery.
• Merchant of Record — Paddle.com acts as reseller and Merchant of Record for our sales, handling checkout, subscription management, payments, tax compliance, invoicing and refunds.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are legally required to disclose.

We do not sell your personal data.

Some providers process data outside the UK/EEA. Where that happens, we rely on UK/EU adequacy decisions or Standard Contractual Clauses (with the UK Addendum where relevant) together with appropriate technical safeguards.

Account data is kept while your account is active and for up to 6 months after closure. Stored documents are deleted when you delete them or when your account is closed. Tool and AI history is kept for the period shown on your plan. Billing records held by us are kept for as long as required by tax law (typically 6 years). Analytics data is kept in aggregated or pseudonymised form. We delete or anonymise data when it is no longer needed.

Under UK GDPR and the EU GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time. Contact privacy@docsy.uk and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls in our database, least-privilege access for staff, and regular dependency and security reviews. No system is perfectly secure, but we work to protect your data and will notify you of a breach where required by law.

We use essential cookies and local storage for sign-in, security and preferences such as your theme. With your consent we also use analytics and product-insight cookies (Google Analytics and Microsoft Clarity) to understand how the site is used. You can manage or withdraw consent through your browser settings or by clearing site data; blocking essential cookies will prevent sign-in from working. We do not use advertising cookies.