Privacy Policy

1.Who we are

Great Developers Info Tech Pvt Ltd, C 110, Sector 65, Noida 201301, Uttar Pradesh, India, operates TheDocs. For personal data about visitors to this website and about the people who administer a TheDocs account, we are the data controller.

For the content our customers publish in their own knowledge bases - which may contain personal data about their users - our customer is the controller and we act as a processor on their instructions.

2.What we collect

We collect only what we need to run the service and the business behind it.

• Account data: name, work email, company, role, and password hash or SSO identifier.
• Billing data: billing name and address, tax identifiers, and the last four digits and expiry of a card. Full card numbers are handled by our payment processor and never reach our servers.
• Usage data: pages viewed, features used, and error diagnostics, tied to your account so we can support you.
• Content: the articles, media and settings you create in your workspace.
• Enquiry data: what you send us through the contact and demo forms.
• Website analytics: aggregate visit data, collected only after you accept cookies.

3.Why we process it, and on what basis

Under the GDPR and comparable laws our lawful bases are as follows.

• To provide the service you subscribed to - performance of a contract.
• To bill you and meet tax and accounting obligations - legal obligation.
• To secure the service, prevent abuse and debug faults - legitimate interests.
• To send product and marketing email - consent, which you can withdraw at any time via the unsubscribe link.
• To place non-essential cookies - consent, given through the cookie banner.

4.AI features and your content

When AI features are enabled, article content from your workspace is used to retrieve and generate answers for readers of that same workspace. It is not used to train shared or third-party models, and it is never exposed to another customer.

AI prompts and responses are retained for 30 days for troubleshooting, then deleted. Retention can be shortened on Enterprise plans, and AI can be disabled entirely per workspace or per project.

5.How long we keep it

We keep personal data only as long as we need it.

• Account data: for the life of the account, then 30 days.
• Content and backups: 30 days after cancellation for export, then deleted from primary storage and purged from backups within a further 30 days.
• Billing records: eight years, as required by Indian tax law.
• Support and enquiry correspondence: 24 months.
• Website analytics: 14 months in aggregate form.

6.Who we share it with

We do not sell personal data. We share it only with sub-processors who help us run the service, each under a written agreement that restricts their use of it. Categories include cloud hosting, email delivery, payment processing, error monitoring and, where enabled, AI inference.

The current sub-processor list is available on request and is attached to our Data Processing Agreement. We give notice before adding a new sub-processor so you can object.

7.Where your data is held

You choose India, the European Union or the United States as your workspace region. Content and its backups stay in that region.

Where personal data is transferred out of the EEA or the UK, we rely on Standard Contractual Clauses with appropriate supplementary measures.

8.Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent.

To exercise a right, email privacy@thedocs.in. We respond within 30 days. If we cannot act on a request we will explain why. If you are unhappy with our response you may complain to your local supervisory authority.

If you are a reader of a customer's knowledge base, please raise the request with that customer - they are the controller of that content and we will assist them in responding.

9.Cookies

Essential cookies keep you signed in and remember your consent choice; these are always set. Analytics cookies are set only after you accept them in the banner, and you can change your mind by clearing cookies for this site.

We do not use advertising cookies or third-party trackers on this website.

10.Security

Data is encrypted in transit with TLS 1.2 or higher and at rest with AES-256. Access to production systems is limited to named engineers, logged and reviewed quarterly. Our security page describes the controls in more detail.

If a personal data breach affects you, we will notify you and, where required, the relevant supervisory authority, within the timeframes the law requires.

11.Children

TheDocs is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.

12.Changes and contact

We will post any change to this policy on this page and update the effective date. Where a change is material we will email account administrators at least 30 days in advance.

Privacy questions and requests: privacy@thedocs.in. Grievance officer contact details for users in India are available on request and will be published here before launch.