01Who we are
DocsGenie is operated by Useful Media Limited (the parent company, registered in Nigeria). Useful Innovations Inc., a Delaware corporation and wholly-owned subsidiary, handles US payments and customer-facing operations. Together, they're responsible for your data — but your data itself is stored in the United States.
This Privacy Policy explains how Useful Media Limited and its wholly-owned subsidiary Useful Innovations Inc. (collectively "DocsGenie," "we," "us," "our") collect, use, share, and protect information when you use our website at docsgenie.net, our applications, and our related services (collectively, the "Service").
The corporate structure, briefly
Useful Media Limited is the parent company that operates the DocsGenie service. It is the entity that makes decisions about user data — the data controller for purposes of GDPR.
Useful Innovations Inc. is a Delaware C-corporation, wholly owned by Useful Media Limited. It is the contracting party for US-based users, processes payments through Stripe, and acts on behalf of Useful Media Limited as a data processor for US-facing operations.
For purposes of GDPR, Useful Media Limited is the data controller. Useful Innovations Inc. acts as a processor for US payment and customer-service activities. For purposes of CCPA/CPRA, both entities are "businesses" with respect to California residents and accept the same obligations.
For purposes of the Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR), Useful Media Limited is the data controller.
02What we collect
Three buckets: account info (your email, password), document content (the docs you create), and technical info (basic analytics so the site works).
| Category | What it includes | Source |
|---|---|---|
| Account information | Email address, hashed password, name (optional), account preferences | You |
| Billing information | Payment method details (handled by Stripe — we never see card numbers), billing address, invoices, transaction history | You via Stripe |
| Document content | The legal documents you create, the inputs you provide, AI Draft prompts, version history | You |
| Usage data | Pages visited, features used, time spent, AI credits consumed, error logs | Automatic |
| Technical data | IP address, browser type, device type, OS, referrer URL, timestamps | Automatic |
| Communications | Support emails, feedback, survey responses, voting on roadmap | You |
We don't collect special-category data (health, biometrics, race, religion) and we ask that you don't include such information in documents stored on our Service unless you understand the risks.
03How we use it
To run your account, generate your documents, charge you correctly, fix bugs, and respond when you email us. That's it.
We use the information described above for the following purposes:
- Provide the Service: create your account, generate templates and AI-drafted documents, save your work, enable downloads.
- Process payments: charge subscriptions and one-time fees, send receipts, prevent fraud (via Stripe).
- Send service communications: account confirmations, the 48-hour pre-trial-end reminder email, billing notifications, security alerts.
- Improve the Service: analyze aggregated, anonymized usage to fix bugs and prioritize features.
- Provide support: respond when you email hello@docsgenie.net.
- Comply with the law: tax records, fraud investigation, valid legal process.
Legal bases (for EU/UK users)
Under GDPR, we rely on the following legal bases: contract performance (running your account), legitimate interest (security, analytics, fraud prevention), legal obligation (taxes, regulatory requests), and consent (marketing emails, where applicable — you can withdraw at any time).
06AI Draft & your documents
When you use AI Draft, your prompt is sent to our AI provider (Anthropic) to generate the document — and that's it. We don't train AI on your documents.
AI Draft sends your prompt and any structured inputs to Anthropic's API to generate document content. Anthropic operates under a data-processing agreement that prohibits using customer inputs to train their models.
For the documents you save in your DocsGenie account:
- We don't read your documents.
- We don't analyze your document content for any purpose other than rendering it back to you.
- We don't use your documents to train any AI model — ours or anyone else's.
- Documents are encrypted at rest in our database.
07How long we keep your data
While you have an account: as long as you're using it. After cancellation: 30 days, then we delete it.
| Data type | How long |
|---|---|
| Account information | Until you delete your account, then 30 days for recovery |
| Documents you've created | Until you delete them, or 30 days after account cancellation |
| Billing & tax records | 7 years (US tax law requirement) |
| Support communications | 3 years |
| Server logs | 90 days |
| Backups | Up to 30 days, then overwritten |
08Your rights
You can see what we have, fix it, export it, or delete it — anytime, free. Just email hello@docsgenie.net.
- Access: request a copy of your personal information.
- Correction: ask us to fix incorrect data.
- Deletion: ask us to delete your account and personal information ("right to be forgotten").
- Portability: get your documents in a portable format (PDF, DOCX).
- Restriction: ask us to limit how we use your data.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: withdraw consent for any processing based on consent.
For California residents (CCPA/CPRA)
You have the right to know, delete, correct, and opt out of "sale" or "sharing." We do not sell or share personal information, so there's nothing to opt out of.
09Security
We encrypt your data in transit and at rest, hash passwords properly, and our team can't read your documents. No system is 100% secure, but we take this seriously.
- Encryption in transit: all traffic uses TLS 1.2 or higher.
- Encryption at rest: databases and backups are encrypted on Digital Ocean's US-based infrastructure.
- Password hashing: industry-standard algorithms; we never store passwords in plaintext.
- Application-level access controls: our personnel cannot view user-generated documents or account contents.
- Regular updates: we patch our infrastructure and dependencies promptly.
If we ever experience a data breach, we'll notify you and the appropriate authorities within the timeframe required by applicable law (72 hours for GDPR).
10Children's privacy
DocsGenie is for adults. You must be 18+ to use the Service. We don't knowingly collect data from children.
The Service is not directed at children under 18. We do not knowingly collect personal information from anyone under 18.
11Changes to this policy
If we make a meaningful change, we'll email you. Small clarifications won't be announced.
We may update this Privacy Policy from time to time. We'll notify you of material changes by email at least 14 days before the change takes effect.
12How to reach us
Email hello@docsgenie.net for anything privacy-related. Real humans read it.
Privacy contact — Useful Media Limited & Useful Innovations Inc.
For privacy questions, data requests, or to exercise your rights under GDPR, CCPA/CPRA, NDPA/NDPR, or other applicable law:
hello@docsgenie.net
Useful Media Limited (Nigeria) is the data controller. Useful Innovations Inc. (Delaware, USA) is the US-facing entity and processor for US-related operations. Registered business addresses for both entities are available on request.