Last updated: April 2024

1. Introduction

Welcome to GetSafeDocs Inc. ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy and Cookie Policy explains how we collect, use, disclose, and safeguard your information when you use our document sharing service.

GetSafeDocs is proudly Canadian, with all systems and data hosted in Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and follow strong privacy practices aligned with the European Union's General Data Protection Regulation (GDPR).

2. Information We Collect

We collect minimal information necessary to provide our secure document sharing service:

• Account Information: Email address, password (encrypted), and account preferences
• Document Metadata: File names, sizes, upload timestamps, and scan results
• Usage Logs: Access timestamps, IP addresses, and activity logs for security and tracking purposes
• Payment Information: Processed securely through Stripe; we do not store credit card details

3. How We Use Your Information

We use the collected information solely for:

• Providing and maintaining our document sharing service
• Scanning uploaded files for malware and security threats
• Tracking document access for sender visibility
• Processing payments and managing subscriptions
• Communicating important service updates and security notifications
• Improving our service and preventing abuse

4. Data Residency and International Transfers

All data at rest—including uploaded documents in Google Cloud Storage and account information, message metadata, and activity logs in Google Cloud Firestore—is stored and processed exclusively in Google Cloud's Toronto, Ontario region (northamerica-northeast2) in Canada. We do not transfer your data outside of Canada.

5. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We only share data in the following limited circumstances:

• With Your Consent: When you explicitly share documents with recipients
• Service Providers: Google Cloud Platform (hosting in Toronto, Canada) and Stripe (payment processing) under strict data processing agreements
• Legal Obligations: When required by Canadian law or valid legal process

6. Data Retention

We retain your data only as long as necessary:

• Shared Documents: Automatically deleted after their expiration date (7 days to 1 year based on your settings)
• Account Data: Retained while your account is active; deleted upon account deletion request
• Activity Logs: Retained for security and compliance purposes

7. Your Rights

Under PIPEDA and GDPR-aligned practices, you have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your account information
• Deletion: Delete your account and associated data at any time from your profile page
• Portability: Export your data in a machine-readable format
• Withdraw Consent: Opt out of marketing communications at any time

8. Cookie Policy

We use minimal, essential cookies to operate our service:

8.1 Essential Cookies

• Session Cookies: Maintain your login state and authentication session
• Security Cookies: Prevent cross-site request forgery (CSRF) and enhance account security

8.2 Analytics Cookies

• Google Analytics: We use Google Analytics to understand how visitors use our site and improve user experience. You can opt out using browser extensions or privacy settings.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of GetSafeDocs.

9. Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256-GCM with Google Cloud KMS Customer-Managed Encryption Keys across Cloud Storage and Cloud Firestore in Toronto, Canada)
• Automated malware scanning for all uploaded files
• Multi-factor authentication (MFA) and passkey support
• Regular security audits and monitoring

10. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or prominent notice on our website.

12. Contact Us

If you have questions about this Privacy and Cookie Policy or wish to exercise your privacy rights, please contact us:

GetSafeDocs Inc.
Email: support@getsafedocs.com
Or use our Contact Form