Privacy Policy
Last updated: December 30, 2025
1. Introduction
Welcome to Docupbiz. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data and tell you about your privacy rights and how the law protects you.
2. Data Controller
Docupbiz is the data controller responsible for your personal data. If you have any questions about this privacy policy or our privacy practices, please contact us.
3. Data We Collect
We collect and process the following types of personal data:
- Identity Data: Name, username, company name
- Contact Data: Email address, telephone numbers, billing address
- Financial Data: Bank account details, VAT numbers
- Transaction Data: Details about invoices, expenses, and payments
- Technical Data: IP address, browser type, device information
- Usage Data: Information about how you use our service
- Document Data: Uploaded documents, invoices, receipts
4. How We Use Your Data
We use your personal data for the following purposes:
- To provide and maintain our service
- To process your transactions and manage your account
- To send you invoices and payment reminders
- To provide customer support
- To improve our service and develop new features
- To comply with legal obligations
- To detect and prevent fraud
5. Legal Basis for Processing
We process your personal data based on:
- Contract Performance: Processing necessary to perform our contract with you
- Legal Obligation: Processing required by law (e.g., tax records)
- Legitimate Interest: Processing necessary for our legitimate business interests
- Consent: Where you have given explicit consent
6. Data Sharing
We do not sell your personal data. We may share your data with:
- Service providers who help us operate our business
- Payment processors for transaction processing
- Tax authorities and regulatory bodies when required by law
- Professional advisers (lawyers, accountants)
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Financial records are retained for at least 7 years to comply with tax regulations.
8. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.
10. International Transfers
Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place.
11. Cookies
We use cookies and similar technologies to improve your experience. For detailed information, please see our Cookie Policy.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by email or through our service.
13. Contact Us
If you have any questions about this privacy policy or wish to exercise your rights, please contact us at:
Email: privacy@docupbiz.com
Address: Fifteenpeas IT sarl, route d'Eselborn, 2a L-9706 Clervaux Luxembourg
14. Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data appropriately.