Privacy policy

1. Data controller

• Controller: [Legal name — pending], owner of Doqly
• Tax ID: [Pending]
• Contact for privacy matters: support@doqly.eu

2. What data we process

Depending on how you use Doqly, we may process:

• Contact and form data: name, email, company (if applicable) and message, when you request access via this Site.
• Account data: name, email and password (encrypted), if you register in the application.
• Billing data: the data needed to process payment for your plan, managed by our payment gateway.
• Documents you send us: the invoices you forward or upload to the application for analysis — received from your suppliers (business/freelancer accounts) or your own consumption invoices (individual accounts).

3. Purpose and legal basis

• Providing the contracted service (contract performance) — analysing, validating and, where applicable, issuing invoices.
• Responding to your contact or access requests (legitimate interest / consent given when submitting the form).
• Managing billing for your subscription (contract performance).
• Complying with applicable legal obligations (e.g. tax rules related to issuing invoices).

4. Retention

We keep your data while your account is active and, after cancellation, for the legally required periods (e.g. accounting or tax obligations). Contact messages are kept only as long as needed to handle your request.

5. Who we share your data with

We don't sell your data. We only share it with processors that help us provide the service, under contract and with the safeguards required by the GDPR:

• The AI model that analyses your invoices: runs on a rented GPU inside the European Union. It is not sent to third-party AI providers or outside the EU.
• Brevo (France): sending transactional email. No data transfer to the US.
• Payment gateway: processing subscriptions when you take out a plan.
• Certified VeriFactu provider: if you issue invoices, for registration and signing with the Spanish tax agency.

We don't use third-party analytics tools or load Google fonts or other Google resources at runtime.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to support@doqly.eu. If you believe we haven't handled your request properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).

7. Security

We apply reasonable technical and organisational measures to protect your data, including password encryption and processing your invoices on a rented GPU inside the EU.

8. Changes to this policy

We may update this policy to reflect legal or service changes. The date of the last update appears at the top of this page.