Privacy policy

This policy explains what personal data TearDoc collects, why, and what you can do about it. TearDoc is run by Haske Solutions LTD, ABC Place, Waiyaki Way, Westlands, P.O. Box 3462-00506, Nairobi, Kenya. We're the controller of your personal data.

Questions or requests: admin@haskesolutions.com.

1. What we collect

Account details

When you sign up, our sign-in provider, Clerk, collects your email address and, if you give them, your name and the account you sign in with (such as a Google account). We receive your email, name and a sign-in ID from Clerk.

Your documents

We store the files you upload and the files you create in TearDoc, such as signed or converted copies. This includes any signature you draw or save, and the email addresses of people you share a document with.

Payment details

Card and M-Pesa details are handled by our payment providers, Paddle and Paystack. TearDoc never sees or stores your full card number.

We keep a record of each purchase (what you bought, when, the amount and its status). If you save a card for Kenyan payments, we also keep the card type, last 4 digits and expiry date, so you can recognise and remove it in your account.

Technical data

Our servers record basic technical data when you use TearDoc, such as your IP address, browser type and the time of each request. We use it to keep the service secure and fix problems.

Cookies

This website sets no cookies. The TearDoc app uses only the cookies it needs to keep you signed in. We don't use advertising or analytics cookies, and we don't track you across other websites.

2. Why we use it

• To run TearDoc for you: your account, your documents, the tools you use, sharing and purchases. The legal basis is our contract with you.
• To keep TearDoc secure: preventing abuse, fraud and attacks. The legal basis is our legitimate interest in a safe service.
• To meet legal duties: such as keeping tax and payment records. The legal basis is legal obligation.
• To contact you about your account: such as changes to these policies or a problem with a payment.

We don't sell your personal data, and we don't use your documents to train AI models or for advertising.

3. Storage and security

Your documents are kept in private storage that only your account can reach. TearDoc has no public file hosting and no public download links.

Files are processed in an isolated sandbox with no internet access. Access to our systems is limited to the people who need it to run TearDoc.

Our application and documents are hosted by our hosting provider, on servers in the EU or the US.

4. Who we share it with

We share personal data only with the service providers who help us run TearDoc, and only what each one needs:

• Clerk, for sign-in. Clerk stores identity data in the United States.
• Our hosting provider, for hosting the app and your documents on servers in the EU or the US.
• Paddle, which sells and bills orders from customers outside Kenya as merchant of record. It handles your payment details under its own privacy policy.
• Paystack, which processes payments from customers in Kenya.

We may also share data if the law requires it, or to protect someone's safety.

5. International transfers

Some of our providers, including Clerk, process data outside Kenya, the UK and the EU, mainly in the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses for these transfers.

6. How long we keep it

• Documents you've uploaded: until you delete them or close your account.
• Signed outputs you haven't paid for: 30 days, then deleted.
• Closed accounts: when you close your account, your documents are held privately for 30 days so you can recover them. After that, they're permanently deleted.
• Backups: encrypted backups roll over every 30 days, so deleted data leaves our backups within 30 days.
• Purchase records: as long as tax and accounting law requires.

7. Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that's wrong;
• delete your data (you can also close your account yourself in the app);
• limit or object to how we use it;
• send your data to you or another provider in a usable format.

Email admin@haskesolutions.com and we'll reply within 30 days. We may need to confirm it's really you first.

If you're in the EU or UK, you have these rights under the GDPR and UK GDPR. If you're in Kenya, you have them under the Data Protection Act, 2019.

You can also complain to a data protection authority. In Kenya that's the Office of the Data Protection Commissioner. In the UK it's the Information Commissioner's Office, and in the EU it's the authority in your country.

8. Children

TearDoc is for people aged 18 and over. We don't knowingly collect data from children.

9. Changes to this policy

We'll update this policy when the way we handle data changes. If a change matters, we'll tell you by email or in the app before it applies. The date at the top shows the latest version.

10. Contact

Haske Solutions LTD, ABC Place, Waiyaki Way, Westlands, P.O. Box 3462-00506, Nairobi, Kenya.
Email: admin@haskesolutions.com