Privacy Policy

Docaira is a document collection platform operated by its founder, based in Sweden. You can reach us at team@docaira.com.

For the purposes of the GDPR, Docaira is the data controller for information you provide when creating and managing a landlord account. For tenant documents uploaded through the platform, we act as a data processor on behalf of the landlord.

Landlord account data

• Email address, name, password (hashed) — to create and manage your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Billing information — processed by Stripe. We store only your Stripe customer ID and subscription status. Legal basis: contract performance.
• IP address and access logs — retained for 90 days for security monitoring. Legal basis: legitimate interest in preventing fraud (Art. 6(1)(f) GDPR).

Tenant document data

When a landlord creates a case and a tenant uploads documents, we process that data solely on behalf of the landlord as a data processor. The landlord is responsible for ensuring they have a lawful basis for requesting such documents. Tenant data includes:

• Uploaded identification and financial documents (automatically deleted 30 days after case creation)
• Chat conversation history (cleared after 30 days)
• Tenant email address (used only to send the upload link and progress notifications)

We do not sell your Personal Data. We may share your information in the following circumstances:

With service providers

We may share information with trusted third-party service providers who assist us in operating the Service, including hosting, infrastructure, payment processing, authentication, and transactional communications. These providers are contractually bound to process your data only on our behalf and in accordance with applicable data protection law. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

With AI service providers

Where you use AI-powered features of our Service, your inputs and related data may be processed by third-party AI providers as necessary to deliver those features. These providers act as data processors on our behalf and are subject to appropriate data processing agreements.

As required by law

We may disclose your information if required to do so by law or in response to valid requests from public authorities, or where necessary to protect the rights, property, or safety of our company, our users, or others.

In business transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any such change.

With your consent

We may share your Personal Data with third parties when you have given us your explicit consent to do so.

Under GDPR you have the right to: access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interest.

For landlord account data: email team@docaira.com. We will respond within 30 days.

For tenant document data: contact the landlord who created your case — they are the data controller. If you cannot reach them, contact us and we will assist.

We implement TLS encryption for all data in transit, automatic deletion of uploaded files after 30 days, rate limiting against brute-force attacks, audit logging of all data access events, and access controls restricting data to authorised users only.

We use a small number of strictly necessary cookies. See our Cookie Policy for details.

Some sub-processors are based in the United States. All transfers are covered by Standard Contractual Clauses approved by the European Commission under Art. 46(2)(c) GDPR.

We will notify you of material changes by email or via the platform. Continued use after the effective date constitutes acceptance.

Email: team@docaira.com

You have the right to lodge a complaint with the Swedish Data Protection Authority:

Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm
www.imy.se · +46 8 657 61 00