Legal

Cookie Policy

Last Updated: May 10, 2025 Effective Date: May 10, 2025 Version 1.0

Data Controller Docufast Technologies Ltd
11-13 Georgiou Karaiskaki Street, Carisa Salonica Court, Office/Flat 102, 7560 Pervolia, Larnaca, Cyprus
Website: https://docufast.ai
Privacy contact: privacy@docufast.ai

1 Introduction

This Cookie Policy explains how Docufast Technologies Ltd ("Docufast", "we", "us", or "our") uses cookies and similar tracking technologies when you visit or use our website at https://docufast.ai, our Chrome extension, or any related services (collectively, the "Services").

This policy gives you clear and comprehensive information about the cookies we use, why we use them, and the choices available to you — in full compliance with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive, and applicable Cyprus and EU data protection law.

For cookies that require your consent, we will obtain that consent through our cookie consent banner before any non-essential cookies are placed. You may withdraw consent at any time.

2 What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work correctly, provide a better user experience, and give website operators information about how their site is used.

In addition to traditional cookies, we may also use similar tracking technologies, including:

• Local Storage & Session Storage — Browser-based storage that persists data locally on your device.

• Web Beacons / Pixel Tags — Tiny graphic files that allow us to track interactions with emails or web pages.

• Embedded Scripts & SDKs — JavaScript code from third-party services integrated into our platform.

• Browser Fingerprinting — In limited cases, technical characteristics of your browser may be used to distinguish users for security purposes.

3 Types of Cookies We Use

3.1 By Origin

• First-Party Cookies — Set directly by Docufast on our own domain.

• Third-Party Cookies — Set by external services integrated into our platform (e.g. analytics or payment providers).

3.2 By Duration

• Session Cookies — Temporary cookies deleted when you close your browser.

• Persistent Cookies — Cookies that remain on your device for a set period or until you delete them manually.

3.3 By Purpose

We use four categories of cookies, as described in detail in Section 5:

• Strictly Necessary — No consent required

• Functional / Preference — Consent required

• Analytics / Performance — Consent required

• Marketing / Advertising — Consent required

4 Legal Basis for Using Cookies

Under the GDPR, we rely on the following legal bases:

• Legitimate Interests (Art. 6(1)(f) GDPR) — For strictly necessary cookies required for the operation and security of our Services. We have determined that our interest in providing a functional and secure service is not overridden by your fundamental rights.

• Consent (Art. 6(1)(a) GDPR) — For all non-essential cookies (functional, analytics, and marketing). We collect your explicit, freely given, informed, and unambiguous consent via our cookie consent banner before placing these cookies.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland: consent is required before non-essential cookies are loaded. Your consent choices are stored and can be changed at any time via the "Cookie Settings" link in our website footer.

5 Detailed Cookie Inventory

5.1 Strictly Necessary Cookies

These cookies are essential for our website to function. They enable core features such as authentication, session management, and security. They cannot be disabled without significantly impacting the Services.

Legal basis: Legitimate Interests (Art. 6(1)(f) GDPR) — no consent required.

5.2 Functional / Preference Cookies

These cookies enhance the functionality and personalisation of our Services. Without them, some features may not work as intended.

Legal basis: Consent (Art. 6(1)(a) GDPR).

5.3 Analytics / Performance Cookies

These cookies help us understand how visitors interact with our Services by collecting information anonymously or pseudonymously. This helps us improve performance and usability.

Legal basis: Consent (Art. 6(1)(a) GDPR).

5.4 Marketing / Advertising Cookies

These cookies are used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. They may profile your interests across websites to show you targeted ads.

Legal basis: Consent (Art. 6(1)(a) GDPR).

6 Your Rights and Choices

6.1 Cookie Consent Banner

When you first visit docufast.ai, our cookie consent banner allows you to:

• Accept all cookies (including optional categories)

• Reject all non-essential cookies

• Customise your preferences by cookie category

Your preferences are stored for 12 months and can be changed at any time via the "Cookie Settings" link in the footer of our website.

6.2 Browser Controls

Most browsers allow you to control cookies through browser settings. You can block or delete cookies at any time:

• Chrome: chrome://settings/cookies

• Firefox: about:preferences#privacy

• Safari: Preferences → Privacy

• Edge: edge://settings/privacy

Please note that restricting cookies may impair the functionality of our Services.

6.3 Opt-Out Links for Third-Party Services

• Google Analytics: tools.google.com/dlpage/gaoptout

• Google Ads: adssettings.google.com

• Meta / Facebook: facebook.com/adpreferences

• LinkedIn: linkedin.com – Retargeting Opt-Out

• TikTok: ads.tiktok.com/i18n/optout

6.4 Your GDPR Rights

If you are located in the EEA, UK, or Switzerland, you have the following rights:

• Right of Access (Art. 15) — Request a copy of personal data we hold about you.

• Right to Rectification (Art. 16) — Request correction of inaccurate personal data.

• Right to Erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten").

• Right to Restriction (Art. 18) — Request that we restrict processing of your data.

• Right to Data Portability (Art. 20) — Receive your data in a machine-readable format.

• Right to Object (Art. 21) — Object to processing based on legitimate interests or for direct marketing.

• Right to Withdraw Consent (Art. 7(3)) — Withdraw previously given consent at any time, without affecting the lawfulness of prior processing.

• Right to Lodge a Complaint (Art. 77) — Lodge a complaint with your local Data Protection Authority (DPA). In Cyprus, this is the Commissioner for Personal Data Protection.

To exercise any of these rights, contact us at: privacy@docufast.ai

7 International Data Transfers

Docufast Technologies Ltd is registered in Cyprus and operates within the European Union. Some of our third-party service providers (e.g. Google, Meta, LinkedIn) may process data outside the EEA. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission

• Binding Corporate Rules (BCRs) where applicable

• Adequacy decisions issued by the European Commission

For more information, please contact us at privacy@docufast.ai.

8 Data Retention

Personal data collected through cookies is retained only for as long as necessary for the purposes described in this policy, or as required by law. Specific retention periods are listed in the cookie tables in Section 5.

After the retention period expires, data is securely deleted or anonymised. Where possible, we apply IP anonymisation for analytics data.

9 Cookies and Children

Our Services are not directed at children under the age of 16. We do not knowingly collect personal data from children through cookies or any other means. If you believe your child has provided us with personal data, please contact us at privacy@docufast.ai and we will promptly delete such information.

10 Cookies and Our Chrome Extension

Our Chrome extension (Docufast AI) uses browser local storage — not traditional HTTP cookies — to store session data, user preferences, and extension settings locally on your device. This data is:

• Stored locally on your device and not transmitted to external servers without your knowledge

• Used solely to provide the core functionality of the extension

• Subject to Chrome's extension storage permissions, reviewable in your browser's extension settings

The extension does not track your browsing activity beyond the specific web pages where you choose to activate the recording functionality.

11 Third-Party Websites

Our website may contain links to third-party websites. This Cookie Policy does not apply to those sites. We recommend reviewing the cookie and privacy policies of any third-party websites you visit, as we have no control over their data practices.

12 Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in technology, law, or our operations. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this document

• Display a notice on our website or within the cookie consent banner

• Where required by law, seek renewed consent for changed cookie uses

The current version of this Cookie Policy is always available at https://docufast.ai/cookie-policy.

13 Contact Us

If you have any questions, concerns, or requests regarding this Cookie Policy, please contact us:

Docufast Technologies Ltd 11-13 Georgiou Karaiskaki Street, Carisa Salonica Court,
Office/Flat 102, 7560 Pervolia, Larnaca, Cyprus

Email: privacy@docufast.ai
Subject line: [Cookie Policy Inquiry]

We aim to respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to contact the Cyprus Commissioner for Personal Data Protection at www.dataprotection.gov.cy.

This Cookie Policy was prepared in accordance with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive, and applicable Cyprus and EU data protection law.

© 2025 Docufast Technologies Ltd. All rights reserved.