Privacy Policy

This Privacy Policy explains how Filippo Groppi (operating as "Docfire") collects, uses, and protects your personal data when you use the Docfire platform and services, in compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller for the processing of your personal data is Filippo Groppi, operating as "Docfire", VAT/P.IVA IT02880910340, based in Parma, Italy. For any privacy-related request, you can contact us at info@docfire.so.

2. Data We Collect

We process the following categories of personal data: account information (name, email address, company); usage and technical data (IP address, browser and device information, logs and feature-usage data); cookies and similar technologies (see our Cookie Policy); payment information (processed by our payment provider); and any personal data contained in the product data, files and documents you upload to the platform, which we process on your behalf to provide the service.

3. How We Use Your Data

We use your personal data to: provide and maintain our services, process your API requests, communicate with you about your account, improve our platform and develop new features, comply with legal obligations, and protect against fraud and abuse.

4. Legal Basis for Processing

We process your personal data based on: contract performance (to provide our services), legitimate interest (to improve our platform and ensure security), consent (for marketing communications), and legal obligation (for tax and regulatory compliance).

5. Data Sharing

We do not sell your personal data. We share data only with sub-processors that help us operate the platform, under appropriate data-processing agreements: Hetzner (cloud hosting and storage, EU data centres), Stripe (payment processing), Google (AI document extraction and website analytics), and CookieYes (cookie-consent management). Some of these providers may process data outside the EU/EEA; where this occurs, transfers are covered by adequacy decisions or the EU Standard Contractual Clauses. We may also disclose data to authorities where required by law.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. After account deletion, we may retain certain data for up to 10 years to comply with Italian tax and accounting obligations.

7. Your Rights (GDPR)

Under the GDPR, you have the right to: access your personal data, rectify inaccurate data, request erasure, restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, contact us at info@docfire.so. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Contact

For any questions about this Privacy Policy or our data practices, please contact us at info@docfire.so.