Compliance & Data Protection

Last updated: August 2026

1. GDPR Compliance

Dokets VouchAI complies with the General Data Protection Regulation (GDPR) for users in the European Union and European Economic Area.

2. Your Rights Under GDPR

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data ("Right to be Forgotten").
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing of your data for certain purposes.

3. Data Protection Globally

In addition to GDPR, we comply with:

• India: Information Technology Act, 2000 and SPDI Rules
• Brazil: LGPD (Lei Geral de Proteção de Dados)
• California: CCPA (California Consumer Privacy Act)
• Nigeria: NDPR (Nigeria Data Protection Regulation)
• UAE: UAE Data Protection Law

4. Data We Process

• Phone numbers (for authentication)
• Names and profile information
• Transaction and contract data
• KYC documents (optional)
• Work verification photos

5. Legal Basis for Processing

• Contract Performance: To fulfill escrow and contract services
• Legal Obligation: KYC/AML compliance where required
• Legitimate Interest: Fraud prevention and platform security
• Consent: Marketing communications (opt-in only)

6. Data Security Measures

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication for all systems
• Data minimization - we only collect what we need

7. Data Retention

• Account data: Retained while account is active
• Transaction data: Retained for 7 years (legal requirement)
• KYC documents: Retained for 5 years after verification
• Deleted accounts: Data purged within 30 days of deletion request

8. Data Processing Locations

Your data may be processed on servers located in:

• United States (Render, Vercel)
• Singapore (Render database)
• India (Twilio for WhatsApp)

We ensure appropriate safeguards (Standard Contractual Clauses) for international data transfers.

9. Data Protection Officer

For data protection inquiries:

📧 contact@dokets.com

🏢 Charvak IT Consulting Pvt Ltd

10. Reporting Violations

If you believe your data protection rights have been violated, you have the right to file a complaint with your local data protection authority.