Privacy notice

Who we are

DocuScore AI ("DocuScore AI", "we", "us") operates the DocuScore AI visa document-readiness service. For the personal data described in this notice, DocuScore AI is the data controller — we decide why and how your data is processed. Privacy questions can be sent through our contact page.

What we collect and why

• Account data (name, email, login credentials, sign-in provider) — to create and secure your account. Legal basis: performance of our contract with you.
• Assessment answers (nationality, travel plans, finances summary, ties, immigration history) — to generate your readiness analysis. Legal basis: performance of our contract.
• Uploaded documents and the data extracted from them (passport, bank statements, letters) — to check completeness and consistency. Legal basis: performance of our contract; where documents contain sensitive information, your explicit consent given by uploading them.
• Support messages and tickets — to answer you. Legal basis: legitimate interests in supporting our users.
• Usage and device data (pages viewed, actions taken, IP address, browser and device identifiers, logs) — for security, fraud prevention, debugging and product improvement. Legal basis: legitimate interests.
• Marketing preferences and newsletter sign-ups — to send product updates you asked for. Legal basis: consent, withdrawable at any time.
• Billing records we hold (plan, amount, currency, status, provider reference) — for accounting and to grant the right access. Legal basis: legal obligation and contract.

We never sell your data, and we do not share your assessment or documents with immigration authorities.

Payments

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders, and handles payment, billing, tax compliance, invoicing, subscription management and returns. When you buy from us, your payment details are collected and processed by Paddle under the Paddle privacy notice— we never see or store your full card details. We receive only the order metadata needed to grant access and keep our records.

Who we share data with

• Service providers and subprocessors: cloud hosting and database, file storage, AI model providers used to analyse your documents, email delivery and error/analytics tooling — each acting on our instructions.
• Paddle, as our Merchant of Record, for the sale of our products, payments, subscription management, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities or third parties where required by law, or to establish, exercise or defend legal claims.

Where personal data is transferred outside your region, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses with the receiving provider.

How long we keep it

• Uploaded documents: kept while your assessment is active and deleted within 30 days of you deleting the document, the assessment, or your account.
• Assessments and reports: kept for as long as your account is active, then deleted or anonymised within 90 days of account deletion.
• Account and profile data: deleted within 90 days of account closure.
• Support messages: up to 24 months.
• Billing and tax records: retained as long as required by applicable law, typically 6–7 years.
• Security and access logs: up to 12 months.

You can delete any assessment, any document, or your account data at any time from Settings; deletion requests are honoured on the timelines above unless we must keep a record for legal reasons.

Security

We apply appropriate technical and organisational measures: encryption in transit (TLS) and at rest with our hosting provider, private document storage scoped to your account with per-user access rules enforced at the database and storage layer, time-limited signed links for file access, role-based administrative access on a need-to-know basis, and audit logging of sensitive actions. No system can be guaranteed perfectly secure, but we review these controls regularly and act on issues we identify.

Your rights

Subject to the law that applies to you, you have the right to access your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time without affecting prior processing. Many of these are self-service in Settings; otherwise contact us and we will respond within one month. If you are in the UK or EEA you can also complain to your local supervisory authority.

Cookies

We use strictly necessary cookies and local storage to keep you signed in and to keep the service secure — these cannot be switched off. Where we use analytics or marketing cookies, they are set only with your consent and you can change your choice at any time in your browser settings or via our contact page.

Changes

We may update this notice; material changes will be announced in-app or by email. See also our terms of service and refund policy.