Last updated: December 16, 2025 | Effective: December 16, 2025
DocuStamper ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services.
This policy complies with the Singapore Personal Data Protection Act 2012 ("PDPA") and other applicable data protection laws including the EU General Data Protection Regulation ("GDPR") where applicable.
| Data Type | Examples | Purpose |
|---|---|---|
| Account Information | Name, email, password | Account creation and authentication |
| Billing Information | Payment method, billing address | Process payments (via Stripe/PayPal) |
| Documents | PDFs, images you upload | Provide document processing services |
| Communications | Support tickets, feedback | Respond to inquiries, improve service |
| Tester Program | Name, company, use case description | Evaluate tester access requests |
| Launch Notifications | Email address | Notify when service launches publicly |
| Tester Feedback | Feedback type, title, description, attachments | Improve service, manage rewards program |
| Data Type | Examples | Purpose |
|---|---|---|
| Usage Data | Features used, pages visited | Improve service, analytics |
| Device Information | Browser type, OS, device type | Optimize user experience |
| Log Data | IP address, timestamps, errors | Security, debugging, fraud prevention |
| Cookies | Session, preferences | Authentication, remember settings |
| Feature | Data Collected | Storage |
|---|---|---|
| Blockchain Timestamping | Document hash (SHA-512), timestamp, transaction ID | Polygon blockchain (permanent, public) |
| Chain of Custody | Event type, user ID, timestamp, IP address, geolocation | Our secure database (encrypted) |
| Expiring Stamps | Validity dates, stamp configuration, verification status | Our secure database (encrypted) |
| Document Verification | Document hash, verification timestamp, verifier IP | Our secure database (encrypted) |
Important: Blockchain Data Privacy
We use your personal data for the following purposes:
For users in the European Economic Area, we process data based on:
We may share your data with:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Billing information |
| PayPal | Payment processing | Billing information |
| Cloud Hosting (AWS/Vercel) | Infrastructure | Encrypted data storage |
| Polygon Network | Blockchain timestamping | Document hash only (not content) |
| IP Geolocation Services | Chain of custody tracking | IP address (returns location data) |
We do NOT:
| Data Type | Retention Period |
|---|---|
| Uploaded documents | Deleted immediately after processing (not stored) |
| Document activity history | Filenames, hashes, timestamps only - Until account deletion |
| Account information | Until account deletion + 30 days |
| Billing records | 7 years (legal requirement) |
| Security logs | 90 days |
| Tester access requests | Until resolved + 1 year |
| Launch subscriber data | Until unsubscribed + 30 days |
| Tester feedback | Until account deletion |
| Blockchain timestamps | Permanent (cannot be deleted from blockchain) |
| Chain of custody records | Until account deletion + 7 years (legal compliance) |
| Expiring stamp configurations | Until expiration + 1 year |
Note on Blockchain Data
Blockchain timestamps are permanent by design. Once a document hash is recorded on the Polygon blockchain, it cannot be deleted or modified. This is fundamental to blockchain's value as tamper-proof proof of existence. Account deletion will remove the association between your account and the blockchain record, but the hash itself will remain on the public blockchain.
Under PDPA, GDPR, and other applicable laws, you have the right to:
Request a copy of your personal data
Update inaccurate or incomplete data
Request deletion of your data
Receive your data in a portable format
Opt out of optional data processing
Object to certain types of processing
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
We implement appropriate security measures including:
For more details, see our Security & Trust page.
Your data may be processed in countries outside Singapore. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers to countries without adequate data protection laws.
We use cookies for:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Essential | Authentication, security, session | Yes |
| Functional | Preferences, settings | Optional |
| Analytics | Usage statistics (anonymized) | Optional |
You can manage cookie preferences through our cookie banner or your browser settings.
Our Service is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date at the top indicates the latest revision.
For privacy-related questions or to exercise your rights:
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore or your local data protection authority.