Privacy Policy

1. Introduction

This Privacy Policy is provided by Aura Digital B.V. (Registration Number: 53180712), a company registered in The Netherlands with its registered address at De Entree 201, 1101 HG Amsterdam, The Netherlands.

Aura Digital B.V. is the data controller responsible for the personal data collected through DocAIHelp. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) -- Regulation (EU) 2016/679 and applicable Dutch data protection legislation.

This policy applies to all users of DocAIHelp, regardless of location. If you are located in the EU or EEA, you have specific rights under the GDPR as detailed in this policy.

2. Data We Collect

2.1 Information You Provide

When you create an account or make a purchase on DocAIHelp, we may collect the following personal information:

• Name -- your first and last name as provided during registration.
• Email address -- used for account creation, login, purchase confirmations, and communication.
• Country -- your country of residence for tax and legal compliance purposes.
• Order and purchase information -- details of your one-time purchase, including date, amount, and order reference.

2.2 Payment Information

Payment information (credit card numbers, debit card details, Apple Pay, and Google Pay tokens) is processed by our PCI-DSS-compliant third-party payment processors. We do not store your full credit or debit card numbers on our servers. We may retain a truncated card number (last four digits) and transaction reference for record-keeping purposes.

2.3 Automatically Collected Data

When you use DocAIHelp, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Device type
• Pages visited and features used
• Date and time of access
• Referring URL

This data is collected to maintain the security and performance of our service and to improve your experience.

3. Pricing & Payments

DocAIHelp is a one-time purchase of €19.99 (EUR) that grants 5 tokens to use across all features. There is no subscription, no recurring billing, no auto-renewal, and no trial period. Your payment method is charged once at the time of purchase and never again.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• Account creation and management -- to create, maintain, and secure your user account.
• Purchase processing -- to process your one-time payment and provide access to the service.
• Service delivery -- to provide you with access to DocAIHelp tools and features.
• Communication -- to send purchase confirmations, service updates, and important notices regarding changes to our terms or policies.
• Customer support -- to respond to your inquiries, requests, and complaints.
• Service improvement -- to analyze usage patterns and improve the performance, functionality, and user experience of DocAIHelp.
• Legal compliance -- to comply with applicable laws, regulations, and legal obligations.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

5. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Performance of a contract (Art. 6(1)(b) GDPR) -- processing necessary to fulfill your purchase and provide the service.
• Legitimate interests (Art. 6(1)(f) GDPR) -- processing necessary for our legitimate interests, such as service improvement, security, and fraud prevention, provided these interests do not override your fundamental rights.
• Legal obligation (Art. 6(1)(c) GDPR) -- processing necessary to comply with tax, accounting, and other legal requirements.
• Consent (Art. 6(1)(a) GDPR) -- where applicable, for specific processing activities where we have obtained your explicit consent. You may withdraw consent at any time.

6. Cookies & Local Storage

DocAIHelp uses sessionStorage and localStorage (browser-based storage mechanisms) to maintain your session state, remember your preferences, and provide a seamless user experience. These storage mechanisms are used instead of traditional cookies for most functionality.

SessionStorage data is automatically cleared when you close your browser tab or window. LocalStorage data persists until explicitly cleared by you or the application.

We may use essential cookies for security purposes, such as CSRF protection and authentication. These cookies are strictly necessary for the operation of the service and do not require consent under the GDPR.

We do not use third-party advertising or tracking cookies.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Specifically:

• Account data is retained for the duration of your account and for a reasonable period thereafter in case of reactivation or legal requirements.
• Purchase and transaction records are retained for a minimum of 7 years to comply with Dutch tax and accounting regulations.
• Technical and usage data is retained for up to 12 months for analytics and security purposes, after which it is anonymized or deleted.

You may request deletion of your account and personal data at any time by contacting us. We will process your request in accordance with GDPR requirements, subject to any legal retention obligations.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit.
• Encryption of sensitive data at rest in our databases.
• PCI-DSS-compliant payment processing through trusted third-party providers.
• Regular security assessments and access controls.
• Password hashing and secure authentication mechanisms.

While we take all reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. International Transfers

Your personal data may be transferred to and processed in countries outside the EU/EEA. When such transfers occur, we ensure that appropriate safeguards are in place in accordance with the GDPR, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Transfers to countries recognized by the European Commission as providing an adequate level of data protection.
• Other appropriate safeguards as permitted under GDPR Article 46.

10. Your Rights (GDPR)

If you are located in the EU or EEA, you have the following rights under the GDPR with respect to your personal data:

• Right of access (Art. 15) -- the right to obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16) -- the right to have inaccurate personal data corrected.
• Right to erasure (Art. 17) -- the right to request deletion of your personal data ("right to be forgotten").
• Right to restriction (Art. 18) -- the right to request restriction of processing of your personal data.
• Right to data portability (Art. 20) -- the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21) -- the right to object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)) -- where processing is based on consent, the right to withdraw consent at any time.

To exercise any of these rights, please contact us at help@docaihelp.com. We will respond to your request within 30 days, as required by the GDPR.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your EU/EEA member state of residence.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page and, where required by law, notify you via email or through the service.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of DocAIHelp after any changes constitutes your acceptance of the updated policy.