Legal
GDPR Privacy Notice
Effective date: January 1, 2026
This notice supplements our Privacy Policy and applies to individuals located in the European Economic Area (EEA), United Kingdom, or other jurisdictions where the General Data Protection Regulation or equivalent data protection laws apply.
Data controller
DocuShield Inc. is the data controller responsible for your personal data. We are incorporated in the United States and based in New York, NY.
For data protection inquiries, contact us at info@docushield.live.
Legal basis for processing
We process personal data on the following legal bases under GDPR Article 6:
Contract performance
Processing necessary to provide the DocuShield platform and fulfill our obligations under your subscription agreement.
Legitimate interests
Processing for our legitimate business interests, such as improving the platform, preventing fraud, and maintaining security, where these interests are not overridden by your rights.
Legal obligation
Processing required to comply with applicable laws, including tax, accounting, and anti-money laundering obligations.
Consent
Where you have given explicit consent, such as for optional analytics cookies or marketing communications.
International transfers
DocuShield is based in the United States. If you are located in the EEA or UK, your personal data will be transferred to and processed in the United States. We rely on standard contractual clauses approved by the European Commission as the mechanism for transfers outside the EEA where required.
Your data subject rights
Under GDPR, you have the following rights with respect to your personal data:
Right of access
You have the right to request a copy of the personal data we hold about you, along with information about how and why we process it.
Right to rectification
You have the right to request correction of inaccurate personal data we hold about you.
Right to erasure
You have the right to request deletion of your personal data, subject to our legal retention obligations and the nature of blockchain-anchored document records.
Right to restriction
You have the right to request that we restrict processing of your personal data in certain circumstances, for example while a dispute is being resolved.
Right to data portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Right to object
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, including profiling based on those interests.
Blockchain records and erasure
Documents issued through DocuShield are cryptographically anchored on the XDC blockchain. Blockchain records are permanent by design. When you request deletion, we delete the document content from our systems and revoke the document on-chain, but the cryptographic hash remains permanently on the blockchain. This is an inherent characteristic of public blockchain infrastructure and does not constitute a violation of GDPR erasure rights, as the hash alone cannot be used to identify you or reconstruct document content.
Retention periods
We retain personal data for as long as your account is active. After account closure, we retain data for a period required by applicable laws, typically up to seven years for financial records. You may request details about retention periods for specific categories of data.
How to exercise your rights
To exercise any of the rights described above, email info@docushield.live with a description of your request and sufficient information to verify your identity. We will respond within 30 days. If your request is complex, we may extend this by a further two months and will notify you of any extension.
We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.
Right to lodge a complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority. In the EU, this is typically the data protection authority in your country of residence or establishment.
We would prefer to resolve your concern directly. Please contact us first at info@docushield.live and we will do our best to address it.