Gooseberry Hub ("we", "our", "us") operates Docureka at docureka.in. This policy describes what data we collect, why we collect it, and how we protect it. By using Docureka you agree to this policy.
1. Data we collect
Account data. When you sign in with Google we receive your email address and Google profile name. We do not receive or store your Google password.
Document form data. Fields you fill in — names, addresses, rent amounts, dates, and similar — are stored so you can retrieve your documents later. PAN numbers are masked before storage (only the last four characters are retained).
Usage data. We count the number of documents you generate each month to enforce free-tier limits. We do not track detailed behavioural analytics.
Technical logs. Our servers log IP addresses and request metadata for security and debugging. Logs are retained for up to 30 days.
2. How we use your data
- Authenticate you and show your saved documents across devices.
- Generate the PDF you requested and attach it to your account history.
- Enforce monthly document limits on the free tier.
- Send transactional emails (e.g. password reset) — no marketing emails unless you opt in.
- Improve the service: fix bugs, understand which document types are most used.
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
3. Third-party services and data transfers
Supabase — authentication and database. Your account and document data is stored on Supabase infrastructure hosted in Tokyo, Japan. Supabase is SOC 2 Type II certified.
Google OAuth — sign-in only. We receive the minimum profile scope needed to identify your account.
Vercel — web hosting. Vercel may log request metadata as part of its infrastructure.
Google Cloud Platform (GCP) — our PDF generation server runs on a GCP virtual machine in the United States. Form data you submit is transmitted to this server to generate your PDF and is not retained on GCP infrastructure after the PDF is returned.
Cross-border transfers. Your data may be transferred to and processed in Japan (Supabase) and the United States (GCP, Vercel). These countries may not have data protection laws equivalent to those of your home country. Where required by applicable law (including GDPR), such transfers are carried out under appropriate safeguards — including Standard Contractual Clauses with Supabase and GCP — or to countries covered by an adequacy decision. By using Docureka you acknowledge these transfers.
4. Data retention
Your account data and saved documents are retained until you delete your account. Deleting your account permanently and immediately removes all associated data from our systems. You can also export a copy of your data at any time from Account settings.
5. Your rights
Under India's Digital Personal Data Protection Act (DPDPA) 2023 and applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — request erasure of your data (via account deletion or by emailing us).
- Withdrawal of consent — you may stop using the service and request deletion at any time.
To exercise any of these rights, email our Grievance Officer at hello@docureka.in. We will respond within 30 days (or within the timeframe required by your local law).
6. Cookies
We use only a single functional cookie to maintain your login session. We do not use tracking or advertising cookies.
7. Children
Docureka is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it promptly.
8. Changes to this policy
We may update this policy. Material changes will be notified via email or a notice on the site. Continued use after the effective date constitutes acceptance.
9. India — DPDPA 2023
Gooseberry Hub acts as a Data Fiduciary under India's Digital Personal Data Protection Act (DPDPA) 2023. You are the Data Principal. We collect and process your data only for the purposes described in this policy, with your consent given by using the service. You may withdraw consent at any time by deleting your account.
Grievance Officer: Anshul (Owner), hello@docureka.in. Complaints will be acknowledged within 48 hours and resolved within 30 days.
10. Contact
Questions or data requests? Email us at hello@docureka.in.