Loading…
Docketora
Join the pilot

Legal

Privacy notice

How Docketora handles personal data on this website and in Docketora Renew: what we collect, why, who helps us, how long we keep it and your choices.

Draft · Last updated: 6 November 2026

1. Who we are

Docketora Technologies, based in Bangladesh, runs this website and the Docketora Renew app. Write to us at info@docketora.tech; for help with the app, write to support@docketora.tech.

This notice covers the website and Docketora Renew, which is in a founding pilot with a small group of businesses. Docketora Tools, Docketora Trip and our other planned products have not launched; we will extend this notice before they do. Before Renew opens to the public, we will add the names of our service providers and where data is stored.

2. Who decides how information is used

For this website, and for your own Renew account, we do.

Inside a Renew workspace, the organisation decides what goes in: its documents, its files and the details of the people it adds. We store and process that information for the organisation, to provide the service. Questions about it are best sent to your workspace owner; we will help them answer.

3. What this website collects

This website uses no cookies, analytics, advertising or tracking, and loads no third-party scripts or fonts. It collects only:

  • what you send through our contact form: your name, email address, business name and type, an optional phone number and message, the product you are interested in, and the consent wording you agreed to. For now the form opens your own email app, so the message goes from your email account to ours;
  • two small settings kept in your browser, not cookies: your light or dark theme (localStorage) and, for a few seconds while you move between pages, a note that keeps the loading indicator steady (sessionStorage);
  • standard server logs, such as IP address, time, page requested and browser type, which our web server may keep for security and troubleshooting.

4. What Docketora Renew collects

To run the app we collect the information below. We do not ask for national ID numbers, dates of birth or bank details.

  • Account: your name, email address, password (kept only as a one-way hash, never in readable form), preferred language, and whether your email address is verified.
  • Workspace: the business name, type and time zone; optionally a contact email, phone number and address; the header, footer and logo for PDF reports; and plan and payment records (amount, method, reference and date, never card numbers).
  • Documents: what your team enters (title, category, reference number, issuing authority, issue and expiry dates, notes, the responsible person and renewal history) and attached files (PDF, JPG or PNG, up to 10 MB each).
  • Team: members’ names and email addresses, the email addresses of people invited, and each person’s role.
  • Security records: your sign-in history (time, IP address and browser) and the devices where you are signed in.
  • Activity log: who changed what in the workspace, and who viewed, downloaded or exported files and lists. It records what happened, not document contents, and no IP addresses.
  • Reminder records: which reminder emails were sent, to whom and when.

5. Documents about other people

Documents such as employee certificates, tenancy agreements or vehicle papers can contain other people’s personal details. If your organisation adds them, it is responsible for having the right to do so and for telling those people where needed. Please add no more personal detail than you need.

6. How we use information

We use it only to:

  • provide Renew: sign-in, workspaces, storing documents and files, reminders, reports and exports;
  • keep the service secure and working: limiting repeated sign-in attempts, showing you your sign-ins and devices, investigating errors and keeping backups;
  • reply to you, support you and run the pilot, including asking participating businesses about their experience;
  • keep records of plans and payments.

7. What we do not do

  • We do not sell personal data or share it for anyone else’s marketing.
  • We do not show advertising or use tracking, and the app loads no third-party scripts.
  • We do not use your documents to train AI or to build profiles of people.
  • Our staff do not look at document contents as a matter of routine: only when you ask (for example, for an export or a support question), or when needed to keep the service secure or restore it from a backup. Staff actions are logged.
  • Renew does not send SMS or marketing emails.

8. Cookies and browser storage in Renew

Renew uses two cookies, both needed for it to work:

  • a session cookie that keeps you signed in. Scripts cannot read it, it is sent only over HTTPS, and it ends after 7 days without use and after 30 days at most;
  • a language cookie that remembers Bangla or English for one year.
  • Your browser also keeps your display settings (theme, sidebar, notification sounds and reminder pop-ups) and, for a minute after a reload, the screen you were on, which can include document details, so it can be shown again. Desktop notifications are used only if you switch them on. There are no analytics, advertising or tracking cookies.

9. Emails we send

  • Account emails: to verify your address (the link works for 24 hours), reset your password (30 minutes; it also signs you out everywhere), invite you to a workspace (7 days), or tell you an address is already registered. They are needed for security, so they cannot be switched off.
  • Reminder emails before a document expires: by default 30, 15, 7 and 1 days before, between 8 am and 8 pm in the workspace’s time zone, to the responsible person or, if there is none, to the owners. They contain the document’s title, category and expiry date and the workspace name, and never attach files.
  • Every reminder email has an unsubscribe link, and you can switch reminder emails off for each workspace in Settings.
  • During the pilot, and only with your consent, we may also send a reminder by WhatsApp by hand. Those phone numbers are not stored in the app.

10. Who we share information with

  • Service providers that run the app for us (server hosting, file storage and email delivery), who use the data only on our instructions. Before Renew opens to the public, we will name them here and say in which countries data is stored.
  • Payment services: if you pay by bank transfer or mobile wallet (such as bKash, Nagad or Rocket), that provider handles the payment under its own terms. We record only the amount, method and reference.
  • People in your workspace, according to their role: owners and admins see everything; managers see every document and the member list; viewers see the documents; employees see only the documents assigned to them.
  • Authorities, only when the law requires it, and only what is required.

11. How we protect it

No system is perfectly secure, but these measures are in place today:

  • HTTPS for every connection;
  • passwords hashed with Argon2id, email verification before the first sign-in, and sign-in paused after repeated wrong passwords;
  • each workspace kept separate, with access checked on every request and every file download;
  • files in private storage under random names, opened through links that expire after 90 seconds;
  • encrypted daily database backups.
  • If you notice a problem, tell us at info@docketora.tech. If a security incident affects your data, we will tell the affected workspace owners promptly.

12. How long we keep it

We keep a workspace’s data while the workspace is open. If an owner deletes it, we close it at once; it can be reopened on request within 30 days, and after that it is deleted permanently. Encrypted backups are kept for up to 8 more weeks, and earlier versions of files for up to 30 days, and then deleted. You can ask for a full export at any time before deletion.

  • Sign-in history: 90 days.
  • In-app notifications: 90 days once read, 180 days at most.
  • Removed files: 30 days.
  • Accounts never verified and without a workspace: 30 days.
  • Contact-form messages: as long as we need them to reply to you and run the pilot.
  • Archived documents and the activity log: until the workspace is deleted.

13. Deleting your account

You can delete your account in Settings. We remove your name, email address, password, sessions and sign-in history. Records you added in a workspace stay, because they belong to the organisation, and show “Deleted user” as the person who added them. If you are the only owner of a workspace, transfer ownership or delete the workspace first.

14. Your choices

  • Change your name and language, and see or sign out your devices, in Settings.
  • Owners, admins and managers can export the documents list as CSV or PDF; owners can ask us for a full export of the workspace, including files.
  • To see, correct or delete information we hold about you, or to change your account’s email address, write to info@docketora.tech. If the information is in a workspace, we will involve its owner.
  • You can withdraw your consent to being contacted about the pilot at any time.

15. Children

Docketora is made for businesses and the people who work in them. It is not meant for children.

16. Changes to this notice

We will update this notice as the products change and show the date at the top. Before a significant change takes effect, we will tell workspace owners by email.