Privacy Policy1

1. Who We Are and Our Role

Re-Doc is operated by CypherLayer Technologies Private Limited, incorporated in India. Customer documents are primarily stored and processed on infrastructure in the European Union.

For account, billing, and website data, we are the controller (data fiduciary). For documents you upload, we act as processor on your instructions: you remain the controller of the personal data inside them and are responsible for having the right to upload them. Where we process documents for a business customer, our Data Processing Addendum also applies; a copy is available on request at compliance@re-doc.com.

2. Information We Collect

• ·Account information: name, email, and sign-in identifier (we never receive your Google password).
• ·Uploaded documents and generated outputs, including any personal data they contain.
• ·Document metadata: filename, size, type, and processing status.
• ·Technical and usage data: IP address, browser, device, pages visited, and error and security logs.
• ·Payment information, handled by payment providers; we do not store full card numbers.
• ·Messages you send to support.

3. How We Use Information

We use information to provide and secure the Services, process your documents, manage accounts and payments, respond to support requests, improve the platform, and meet legal obligations.

Our legal bases are performance of a contract, legitimate interests (security and improvement), legal obligations, and consent where required. Providing your name and email is necessary to create an account; without them we cannot provide the Services. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. How Documents Are Processed

Documents are uploaded over encrypted connections and processed automatically, which may include text recognition (OCR), format conversion, and AI-assisted detection and replacement of sensitive information.

Zero Data Retention AI. All AI processing of document content is routed only to Zero Data Retention endpoints. The AI model provider does not store your content, prompts, or outputs after the request is completed and does not use them for training.

We do not routinely read your documents. Authorized staff may access them only when needed for support, security, or legal compliance.

5. Service Providers and Transfers

We use trusted providers (subprocessors) for hosting, sign-in, payments, analytics, OCR, document conversion, and AI processing. Each processes data only for its specific function. The current list is available on request at compliance@re-doc.com.

Because we operate from India and some providers operate in other countries, data may be transferred across borders. Where this happens we use appropriate safeguards, such as Standard Contractual Clauses.

On-premise deployments. The service providers, AI processing, and retention described in this Policy apply only to the Re-Doc cloud app at re-doc.com. When Re-Doc is deployed on-premise on a customer's own servers, documents are processed entirely within the customer's environment and are not sent to Re-Doc or to any third-party service; data handling is governed by the customer's own policies and the agreement with that customer.

6. Retention

• ·Uploaded documents and outputs: automatically deleted once they are older than 30 days, or earlier on request.
• ·Account information: kept while your account is active and deleted within 90 days after the account is closed.
• ·Billing records: kept as required by tax law.
• ·Security and operational logs: kept for a limited period.

7. Security

We use encryption in transit, access controls, monitoring, and Zero Data Retention AI endpoints to protect information. No system is completely secure, and you are responsible for keeping your account and downloaded files safe.

8. Cookies

We use essential cookies to keep you signed in; these do not need consent. With your consent, we also use analytics tools (Google Analytics and Microsoft Clarity, which records how pages are used) to improve the site. These are only switched on if you click Accept in the cookie banner, and you can change your choice at any time through Cookie settings in the footer. We do not use advertising cookies.

9. Your Rights

Depending on applicable law, you may access, correct, or delete your information, object to or restrict processing, withdraw consent, request a copy of your data, and complain to a data protection authority, including the Data Protection Board of India. Contact us using Section 12; we may verify your identity first.

You can withdraw consent at any time, as easily as you gave it, by emailing compliance@re-doc.com. To close your account and have your data deleted, email the same address. Withdrawal does not affect processing already carried out.

If your request concerns data inside a document uploaded by one of our customers, we will refer it to that customer.

10. Children

Re-Doc is not intended for anyone under 18. If you believe a child has given us information directly, contact us and we will delete it.

11. Changes

We may update this Policy and will change the effective date above. For material changes we will give notice through the Services or by email, and obtain consent where the law requires it.

12. Contact and Grievances

We acknowledge grievances within 48 hours and resolve them within one month, or sooner where the law requires.