Privacy Policy

Legal

Privacy Policy

Last updated: May 10, 2025  ·  Docufast Technologies Ltd

Docufast Technologies Ltd ("Docufast", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

This policy applies to our website at docufast.ai, our Chrome extension, and all related services (collectively, the "Services").

Data Controller
Docufast Technologies Ltd
11-13 Georgiou Karaiskaki Street, Carisa Salonica Court, Office/Flat 102
7560 Pervolia, Larnaca, Cyprus
privacy@docufast.ai

1. What information we collect

Account information

When you create a Docufast account, we collect your name, email address, and — where applicable — your company name. You can sign up via email and password, Google, or Microsoft.

Payment information

Payments are processed by Stripe. We do not store your credit card details. Stripe may collect and process your billing name, email, and payment method. See Stripe's Privacy Policy for details.

Content you create

When you use Docufast to record and document workflows, we process:

  • Screenshots and screen recordings captured during your session

  • Browser activity on the active tab while recording is enabled

  • Text and inputs visible on the web pages you choose to record

Important: Only record on pages and workflows you are authorised to capture. Docufast does not actively monitor the content of your recordings. You are responsible for ensuring that any personal data captured during recordings is handled in accordance with applicable law.

Usage data

We automatically collect information about how you use our Services, including pages visited, features used, actions taken, session duration, IP address, browser type, and device information.

Communications

If you contact us by email or through our support chat, we store the content of that communication and your contact details.

2. How we use your information

Purpose

Legal basis

Providing and operating the Services

Contract (Art. 6(1)(b) GDPR)

Account management and authentication

Contract (Art. 6(1)(b) GDPR)

Processing payments

Contract (Art. 6(1)(b) GDPR)

Sending transactional emails (onboarding, password reset, billing)

Contract (Art. 6(1)(b) GDPR)

Sending product updates and newsletters

Consent (Art. 6(1)(a) GDPR)

Analytics and product improvement

Legitimate interests (Art. 6(1)(f) GDPR)

Security, fraud prevention, and abuse detection

Legitimate interests (Art. 6(1)(f) GDPR)

Compliance with legal obligations

Legal obligation (Art. 6(1)(c) GDPR)

3. Chrome Extension — special notice

Our Chrome extension only activates when you explicitly start a recording. It does not run in the background, track your general browsing activity, or collect data from pages where recording is not active.

Content captured during a recording (screenshots, page text, browser activity) is transmitted to our servers solely to generate your guides, videos, and Teach Me walkthroughs. This content is stored in your account and is not used for any other purpose, including advertising or training AI models, without your explicit consent.

4. Third parties we share data with

We do not sell your personal data. We share data only with the following service providers, who process it on our behalf:

Provider

Purpose

Location

Stripe

Payment processing

USA (SCCs in place)

Google Analytics

Website analytics

USA (SCCs in place)

Mixpanel

Product analytics

USA (SCCs in place)

Intercom

Customer support chat

USA (SCCs in place)

OpenAI

AI-generated step descriptions and narration

USA (SCCs in place)

Google (Gemini)

AI-generated step descriptions

USA (SCCs in place)

Cloudflare

Security, DNS, CDN

USA (SCCs in place)

We may also disclose your information if required to do so by law, court order, or governmental authority.

5. Marketing and outreach emails

We send the following types of emails:

  • Transactional emails (onboarding, password reset, billing receipts) — sent as part of our contractual relationship. You cannot opt out of these while your account is active.

  • Product updates and newsletters — sent with your consent. You can unsubscribe at any time via the link in any email.

  • Cold outreach — we may contact potential business customers whose contact details are obtained through legitimate B2B sources (e.g. LinkedIn, Apollo). This is done on the basis of legitimate interests. Recipients can opt out at any time by replying or clicking the unsubscribe link.

6. How long we keep your data

Data type

Retention period

Account data

For the duration of your account, plus 30 days after deletion

Recordings, guides, and videos

For the duration of your account, deleted upon account deletion

Payment records

7 years (legal and tax obligation)

Analytics data

26 months (Google Analytics default)

Support communications

3 years

7. International data transfers

Docufast Technologies Ltd is based in Cyprus and operates within the European Union. Some of our service providers (see Section 4) are located outside the EEA, primarily in the United States. For all such transfers, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives equivalent protection.

8. Your rights

As a user in the EEA or UK, you have the following rights under the GDPR:

  • Access — Request a copy of the personal data we hold about you.

  • Rectification — Ask us to correct inaccurate or incomplete data.

  • Erasure — Ask us to delete your personal data ("right to be forgotten").

  • Restriction — Ask us to pause processing of your data in certain circumstances.

  • Portability — Receive your data in a structured, machine-readable format.

  • Objection — Object to processing based on legitimate interests or for direct marketing.

  • Withdraw consent — Where processing is based on consent, withdraw it at any time without affecting prior processing.

  • Lodge a complaint — Contact the Cyprus Commissioner for Personal Data Protection at dataprotection.gov.cy.

To exercise any of these rights, email us at privacy@docufast.ai. We will respond within 30 days.

9. Security

We take the security of your data seriously. Our measures include encrypted data transmission (TLS), encrypted storage, access controls, and regular security reviews. However, no system is completely secure. If you believe your account has been compromised, please contact us immediately at privacy@docufast.ai.

10. Children

Our Services are not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Cookies

We use cookies and similar tracking technologies on our website. For full details, see our Cookie Policy.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or via a notice in the product. The current version is always available at docufast.ai/privacy-policy.

13. Contact

For any questions or requests regarding this Privacy Policy:

Docufast Technologies Ltd
11-13 Georgiou Karaiskaki Street, Carisa Salonica Court, Office/Flat 102
7560 Pervolia, Larnaca, Cyprus
privacy@docufast.ai

© 2025 Docufast Technologies Ltd. All rights reserved.