Privacy Policy

Last updated: 28 June 2026

1. About this Policy

Docs Rok (“we”, “us”, “our”) operates the Docs Rok platform at docsrok.com and docsrok.com.au. This Privacy Policy explains how we collect, use, store, and disclose personal information when you use our service.

We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By creating an account or using Docs Rok, you consent to the practices described in this policy.

2. What information we collect

We collect the following categories of information:

Account information

  • Email address (used for login and transactional emails)
  • Full name (optional, used in document generation)
  • Password (stored as a secure hash — we never store your plain text password)

Business information

You provide this information during onboarding. It is used to generate your business documents:

  • Business name
  • Australian Business Number (ABN)
  • Business address
  • State of operation
  • Trade / service type
  • Number of employees
  • Primary contact name and role
  • Services offered by your business

Payment information

Payment details (credit card numbers, billing address) are collected and processed directly by Stripe, Inc. We do not store your credit card number or CVV. We store only a Stripe customer ID and subscription status in our database.

Usage information

  • Log data (IP address, browser type, pages visited, timestamps)
  • Documents you generate and view
  • Subscription and billing history

3. How we use your information

We use your information for the following purposes:

  • Providing the service — generating business-operations documents customised to your business
  • Account management — creating and maintaining your account, authentication, and access control
  • Billing and payments — processing subscriptions and managing your billing through Stripe
  • Transactional emails — sending account confirmation, trial reminders, and payment receipts via Resend
  • Service improvements — understanding how users interact with the platform to improve features
  • Legal compliance — meeting our obligations under applicable Australian law

We do not use your business information for marketing, do not sell your data to third parties, and do not use it for any purpose other than providing the Docs Rok service.

4. Third-party services we use

To provide Docs Rok, we share data with the following trusted third-party services. Each is bound by its own privacy policy and security standards:

Supabase (Database and Authentication)
Your account and business data is stored in a Supabase PostgreSQL database hosted in Sydney, Australia (AWS ap-southeast-2). Supabase provides authentication and enforces row-level security so your data is only accessible to you.
supabase.com/privacy
Anthropic (Document Generation)
Your business information (name, ABN, state, industry, work activities) is sent to Anthropic’s Claude API to generate your documents. Anthropic processes this data to generate text and does not retain it for training purposes under its API terms.
anthropic.com/privacy
Stripe (Payments)
Subscription billing is handled by Stripe, Inc. Stripe collects and processes your payment card details directly — we never see or store your card number. Stripe is PCI DSS Level 1 certified.
stripe.com/privacy
Resend (Transactional Email)
We use Resend to send account confirmation, trial expiry, and payment confirmation emails. Your email address is shared with Resend solely for this purpose.
resend.com/privacy

5. Data storage and security

Your data is stored in Australia (Sydney). We implement the following security measures:

  • All data is transmitted over HTTPS/TLS encryption
  • Passwords are hashed using bcrypt — never stored in plain text
  • Row-level security (RLS) ensures each user can only access their own data
  • API keys and secrets are stored as environment variables, never in code
  • Database backups are maintained by Supabase

While we take reasonable steps to protect your information, no internet transmission is completely secure. We cannot guarantee absolute security.

6. Data retention

We retain your personal information and documents for as long as your account is active. If you cancel your subscription, we retain your account data for 90 days before deletion, in case you choose to return. You may request immediate deletion at any time (see Section 7).

Financial records (transaction history) are retained for 7 years as required by Australian tax law, even after account deletion.

7. Your rights

Under the Australian Privacy Principles, you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request that we correct inaccurate or incomplete information
  • Deletion — request deletion of your account and personal data
  • Portability — request your business information and generated documents in a portable format

To exercise any of these rights, contact us at support@docsrok.com.au. We will respond within 30 days.

8. Cookies

Docs Rok uses session cookies for authentication (to keep you logged in). We do not use advertising cookies or third-party tracking cookies. We do not use Google Analytics or any advertising pixel on our platform.

9. Children

Docs Rok is a business service and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. Continued use of Docs Rok after changes constitutes acceptance of the updated policy.

11. Contact and complaints

For privacy questions or concerns, contact us at: support@docsrok.com.au

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.