Gooseberry Hub ("we", "our", "us") operates Docureka at docureka.in. This policy describes what data we collect, why we collect it, and how we protect it. By using Docureka you agree to this policy.
1. Data we collect
Account data. When you sign in with Google we receive your email address and Google profile name. We do not receive or store your Google password.
Document form data. Fields you fill in — names, addresses, rent amounts, dates, and similar — are stored so you can retrieve your documents later. PAN numbers are masked before storage (only the last four characters are retained).
Usage data. We count the number of documents you generate each month to enforce free-tier limits. We do not track detailed behavioural analytics.
Technical logs. Our servers log IP addresses and request metadata for security and debugging. Logs are retained for up to 30 days.
2. How we use your data
- Authenticate you and show your saved documents across devices.
- Generate the PDF you requested and attach it to your account history.
- Enforce monthly document limits on the free tier.
- Send transactional emails (e.g. password reset) — no marketing emails unless you opt in.
- Improve the service: fix bugs, understand which document types are most used.
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
3. Third-party services and data transfers
Supabase — authentication and database. Your account and document data is stored on Supabase infrastructure hosted in Tokyo, Japan. Supabase is SOC 2 Type II certified.
Google OAuth — sign-in only. We receive the minimum profile scope needed to identify your account.
Netlify — web hosting. Netlify may log request metadata as part of its infrastructure.
Google Cloud Platform (GCP) — our PDF generation server runs on a GCP virtual machine in the United States. Form data you submit is transmitted to this server to generate your PDF and is not retained on GCP infrastructure after the PDF is returned.
4. Data retention
Your account data and saved documents are retained until you delete your account. Deleting your account permanently and immediately removes all associated data from our systems. You can also export a copy of your data at any time from Account settings.
5. Your rights
Under India's Digital Personal Data Protection Act (DPDPA) 2023 and applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — request erasure of your data (via account deletion or by emailing us).
- Withdrawal of consent — you may stop using the service and request deletion at any time.
To exercise any of these rights, email our Grievance Officer at hello@docureka.in. We will respond within 30 days.
6. Cookies
We use only a single functional cookie to maintain your login session. We do not use tracking or advertising cookies.
7. Children
Docureka is not directed at children under 18. We do not knowingly collect data from minors.
8. Changes to this policy
We may update this policy. Material changes will be notified via email or a notice on the site. Continued use after the effective date constitutes acceptance.
9. India — DPDPA 2023
Gooseberry Hub acts as a Data Fiduciary under India's Digital Personal Data Protection Act (DPDPA) 2023. You are the Data Principal. We collect and process your data only for the purposes described in this policy, with your consent given by using the service.
Grievance Officer: Anshul (Owner), hello@docureka.in. Complaints will be acknowledged within 48 hours and resolved within 30 days.
10. Contact
Questions or data requests? Email us at hello@docureka.in.