Privacy notice
Last updated 8 October 2026 · Draft under review by our lawyer. If anything changes materially, we’ll tell you by email before it applies.
This notice explains what personal data DocuCraft collects, why, who it is shared with and the rights you have under the Nigeria Data Protection Act 2023 and, where it applies, the UK and EU GDPR.
1. Who we are
DocuCraft helps people prepare documents such as grant applications, business plans, proposals, CVs and statements, and connects them with experts. For questions about your data, contact us through the Help centre or on WhatsApp at +234 903 360 9793.
2. What we collect
- Account details: your name, email address, the type of account you chose and your sign-in settings (authenticator app or passkeys, if you add them).
- What you write: answers to template questions, document text, CV or profile files you upload for review, and support tickets or reports.
- Experts: application details, CV, credentials, references and payout details needed to pay you.
- Signed documents: for each seal we keep the file’s SHA-256 fingerprint, file name, signer name, signer email and time. We do not keep the signed document.
- Usage and security records: sign-in times, device and browser information, and an audit log of consequential actions.
3. Why we use it
- To provide the service you asked for: writing, calculating, converting, signing and exporting your documents (performance of a contract).
- To run the expert marketplace: matching, payment holding, payouts and dispute handling.
- To keep accounts secure and prevent abuse, fraud and off-platform payment requests (legitimate interests and legal obligations).
- To send the emails you need: sign-in codes, job updates, receipts and important notices. You choose which non-critical notifications you receive.
4. AI processing
Some features send your text or uploaded file to Anthropic’s Claude models to read, review or draft content. Anthropic processes this data to provide the service to us. Your documents are not used to train AI models.
All financial figures are calculated by DocuCraft’s own code, not by AI.
5. Who we share it with
- An expert you hire, for that job only.
- Service providers who run parts of DocuCraft for us: hosting (Vercel), database (Neon, EU region), email (Zoho Mail and ZeptoMail), AI processing (Anthropic), payments (Paystack) and website analytics (Google Analytics, through Google Tag Manager, which uses cookies to count visits and see which pages are used).
- Authorities, only where the law requires it.
We do not sell personal data.
6. International transfers
Some providers process data outside Nigeria, including in the European Union and the United States. We use providers with appropriate safeguards for these transfers, as the NDPA requires.
7. How long we keep it
Your account and documents are kept while your account is open. When you close your account, we delete your documents and personal data within 30 days, except records we must keep by law (for example payment and tax records) and seal records, which keep only the fingerprint, file name, signer name and time so that sealed documents can still be verified.
8. Your rights
You can ask to access, correct, download or delete your personal data, object to or restrict some processing, and withdraw consent where we rely on it. Contact us through the Help centre and we will respond within the time the law requires. You can also complain to the Nigeria Data Protection Commission.
9. Security
Sign-in uses one-time email codes with optional authenticator apps and passkeys, codes are stored hashed, connections are encrypted, and staff access to documents is limited and logged.
10. Children
DocuCraft is not intended for children under 13. Students under 18 should use it with a parent or guardian’s permission.