Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how SkydocPlus ("we", "us") collects, uses and protects personal data. It is drafted to meet the Digital Personal Data Protection Act, 2023 (India) ("DPDP Act") and the EU General Data Protection Regulation ("GDPR").

1. Data Fiduciary / Controller

SkydocPlus acts as the Data Fiduciary under the DPDP Act and the Controller under the GDPR for personal data processed through the service. We are accountable for compliance, for implementing reasonable security safeguards, and for responding to your rights requests.

2. What we collect

• Account data: name, email address, optional WhatsApp number with country code.
• Document metadata only: document name, category, issuing country/authority, optional reference identifier, issue date and expiry date. We never ask for or store document scans or images.
• Consent records: the consents you gave, the policy version and timestamp.
• Audit & delivery logs: sign-in events, document change timestamps and reminder delivery outcomes.

3. Purpose Limitation & lawful basis

We process data solely to track document validity and send you transactional reminders. The lawful basis is your explicit, freely given consent (DPDP Act s.6; GDPR Art. 6(1)(a)) and performance of our contract with you (GDPR Art. 6(1)(b)). We do not use your data for advertising, profiling or any unrelated purpose.

4. Zero third-party commercial sharing

Your personal data is never sold, rented or shared with third parties for commercial purposes. We use a limited set of processors only to run the service — cloud hosting and database, an email delivery provider and the Meta WhatsApp Business platform — each bound by data processing terms and permitted to use data only on our instructions.

5. Security

Data is encrypted in transit (TLS 1.2+/1.3) and at rest (AES-256). Row-level security ensures no user can access another user's records. Access by staff is restricted and logged.

6. Retention

We keep data while your account is active. When you delete your account, all associated data is erased immediately from our production database; encrypted backups roll off within 30 days.

7. Your rights

• Access & portability: download all your data any time via Settings → Export My Data.
• Correction: edit any document or profile field in the app.
• Right to Erasure: Settings → Permanent Account & Data Deletion erases everything instantly.
• Withdraw consent: turn off reminder channels or delete your account; withdrawal does not affect prior lawful processing.
• Grievance redressal & complaints: contact our Grievance Officer; you may also approach the Data Protection Board of India or your EU supervisory authority.

8. International transfers

Data may be processed outside your country. Where required we rely on appropriate safeguards such as Standard Contractual Clauses, and we comply with any transfer restrictions notified under the DPDP Act.

9. Children

The service is not intended for anyone under 18. We do not knowingly process children's data.

10. Contact

Grievance Officer / Data Protection contact: privacy@skydocplus.app. We respond within the timelines required by applicable law.