Doc{Mold}

Privacy Policy

Last updated 1 September 2026

Who we are

DocMold ("the Service") is operated by Chinmay Technosoft Pvt Ltd ("we", "us"). This policy explains what personal data we collect when you use www.docmold.com and the DocMold application, why we collect it, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

Data we collect

We collect only what the Service needs to work:

  • Account data you give us: name, email address, phone number, firm name and address, GSTIN/PAN where you enter them for invoicing or document generation.
  • Workspace content you upload or create: Word templates, client master records, generated documents and their variable values. This may include personal data of your clients, which you control and we process on your instructions.
  • Usage and security data: sign-in events, IP address, browser type, actions in the audit trail, and support requests.
  • Payment data: your subscription and invoice history. Card and bank details are collected by our payment processor (Razorpay) and never stored by us.

How we use it

We use personal data to provide and secure the Service, to generate the documents you request, to bill you and issue GST invoices, to respond to support requests, and to send service notices such as trial and renewal reminders. Marketing emails are sent only with your explicit opt-in consent, which is recorded with its timestamp and source and can be withdrawn at any time from your profile or via the unsubscribe link.

Your clients' data

Data about your clients that you store in DocMold is processed solely to produce your documents. Each firm's workspace is isolated from every other firm's. We do not sell, share for advertising, or use workspace content to train models.

Sharing

We share data only with service providers needed to run the Service - hosting and infrastructure, email delivery, payment processing (Razorpay) and our customer relationship system - each bound to process it only for us. We disclose data to authorities only where the law requires.

Retention

Workspace content is retained while your subscription or trial is active. After expiry the workspace becomes read-only for a grace period and is then archived and deleted according to the retention schedule shown in your subscription settings. Invoices and audit records are kept as long as tax and accounting law requires.

Security

All traffic is encrypted in transit (HTTPS/HSTS). Sensitive stored values are encrypted at rest, passwords are hashed, access is role-based, sessions are revocable, and every material action is logged. See our Security page for details.

Your rights

Under the DPDP Act you may access, correct or erase your personal data, withdraw consent, and nominate a person to exercise these rights. Write to support@docmold.com; we respond within the statutory timelines. You may also complain to the Data Protection Board of India.

Cookies and analytics

The application uses strictly necessary storage for sign-in. Our public website may use privacy-respecting analytics to understand how it is used; you can block these with browser settings without affecting the Service.

Changes and contact

We will post changes to this policy here and update the date above. Questions: support@docmold.com.