Privacy Policy

The TryDocify API and website are operated by TryDocify, Pristina, Kosovo ("we", "us"). We are responsible for the personal data described in this policy. You can reach us at [email protected].

• Documents you send to the API are rendered in memory and never stored.
• We keep the minimum needed to run your account: your email address, subscription details and usage counters.
• Payments are handled by Paddle, our merchant of record. We never see your card details.
• We use no analytics, advertising or tracking cookies, and we do not sell personal data.

The JSON documents you send to the API and the PDFs it returns may contain personal data, such as the names and addresses on an invoice. We process this content only to render the document you requested. It is held in memory for the duration of the request and is not written to disk, logs or backups. For this content you are the controller and we act as your processor. If you need a data processing agreement, email us.

• Account data: your email address, and the customer and subscription identifiers Paddle assigns to you, which we receive from Paddle when you subscribe.
• API keys: a one-way hash of each key and its first characters (for example dfy_live_Ab3x). The full key is never stored. A newly created key is kept encrypted for about a day so that it can be shown to you once after checkout, and is deleted as soon as it has been shown or that time has passed.
• Subscription and credit data: plan, status, billing period, credits used and when the key was created and last used.
• Usage records: for each document request, the time, result status, duration, page count, file size and credits used. These records contain no document content.
• Technical logs: request time, method, path, status code and duration, and, for errors, technical diagnostic information. Your IP address is used briefly for rate limiting and security, and may appear in web server access logs.
• Correspondence: the content of emails you send us.

Paddle collects your payment details, billing address and tax information when you buy. Paddle acts as an independent controller for that data under its own privacy policy; it shares with us only what we need to provide the Service, such as your email address and subscription status.

• Providing the Service (rendering documents, managing your key, credits and subscription, support): necessary to perform our contract with you.
• Security and abuse prevention (rate limiting, logs, investigating errors): our legitimate interest in keeping the Service secure and reliable.
• Service emails (about your account, security, or changes to the Service or these policies): necessary to perform our contract. We do not send marketing emails without your consent.
• Legal obligations, such as keeping records required by tax and accounting law, which Paddle mostly handles as merchant of record.

• Account, key and subscription data: while your account is active, and afterwards for as long as needed to handle support requests, disputes and our legal obligations. You can ask us to delete it at any time.
• Usage records: 180 days.
• Technical and access logs: up to 31 days.
• Records of payment notifications received from Paddle: 90 days.
• Database backups: kept for a limited period on a rolling basis and then overwritten.

We share personal data only with providers that help us run the Service:

• Paddle (Paddle.com Market Ltd and its affiliates): payments, tax and subscription management, as merchant of record.
• Cloudflare (Cloudflare, Inc.): network delivery and protection. All traffic to our website and API passes through Cloudflare. Cloudflare privacy policy.
• Our hosting provider, which operates the server the Service runs on.
• jsDelivr: the interactive API reference page loads its viewer from the jsDelivr CDN, which receives your IP address when you open that page. jsDelivr privacy policy.

We may also disclose data where required by law or to protect our rights, and to a successor if the Service is transferred. We do not sell or rent personal data.

We are based in Kosovo, and our providers operate internationally, so your data may be processed outside your country, including outside the EU and the UK. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.

Our website does not set its own cookies and uses no analytics or advertising trackers. Cloudflare may set strictly necessary cookies to protect the site from bots and attacks. When you open the checkout, Paddle's checkout may set cookies it needs to process the payment and prevent fraud, as described in Paddle's privacy policy.

All traffic is encrypted with HTTPS. API keys are stored only as keyed hashes, the one-time key reveal is encrypted, and access to the server and database is restricted. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the authorities where the law requires it.

Depending on where you live, including under the GDPR in the EU and UK, Kosovo's Law on the Protection of Personal Data, and US state privacy laws, you may have the right to:

• access the personal data we hold about you and receive a copy of it;
• correct inaccurate data;
• have your data deleted, or its processing restricted;
• object to processing based on our legitimate interests;
• receive your data in a portable format.

To exercise these rights, email [email protected] from the address linked to your account. We will reply within 30 days. Deleting your data ends your access to the Service; cancel your subscription first so you are not billed again. You also have the right to complain to a data protection authority, such as the Information and Privacy Agency of Kosovo or the authority in your country.

The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.

We may update this policy. We will post the new version here with a new date, and notify you by email of material changes.

TryDocify, Pristina, Kosovo. Email: [email protected]. See also our Terms of Service.