Data protection

• Identity and contact: name, email, phone number, county or city.
• Document: document type, and the document number as a one way hash with only the last four characters readable.
• Tag and scan: tag serials, scan times, and what a finder submitted.
• Financial: payments, receipts, invoices and refunds.
• Backup contact: name, phone number, relationship and your record of consent.
• Security: sign in events, setting changes and audit records.

• Identity, contact and document data: while the account is open.
• Financial data: seven years from the date of payment. This retention is required by tax and accounting law and cannot be shortened by an erasure request.
• Scan, alert and security data: two years.
• On erasure: account and document data is deleted, tags are retired so a scan no longer resolves, and the financial records above remain for the seven year period.

Document numbers are hashed, so nobody at Docfense can read a whole number. Every account record is locked to its owner at the database level. Support staff see masked contact details. Changes to security settings raise an email notice to you.

Signed in, open data and privacy in your settings to download your data, ask for a correction, or request erasure by typing DELETE to confirm. Without an account, write to privacy@docfense.com. Every request gets a reference and an answer within thirty days.

Tell us first at privacy@docfense.com so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya. Full detail on what we collect is in the privacy notice.