Privacy Policy

1. Controller and contact

The controller is Eugen Ionescu, operating GlobalDocBiz as an individual based in Germany. For privacy requests, email support@globaldocbiz.com.

2. Data we process

• Information entered in document forms, which may include names, contact details, addresses, business, tax, payment, and contract information
• A pseudonymous guest identifier, locally saved draft, language and theme preferences
• Optional account information, such as email address, user identifier, and authentication/session data, where account features are used
• Purchase information, including plan, amount, currency, payment status, Stripe session/payment references, credits, and document entitlement identifiers
• Technical data ordinarily generated when using a website, such as IP address, browser/device details, request time, pages requested, and security/error logs

3. Document data

Draft form information is stored in your browser so you can continue editing. To produce an entitled clean PDF, the form information is sent securely to the server for transient PDF generation. The audited purchase records do not store the full document contents; they store an opaque document identifier and limited entitlement details.

You should enter another person’s data only when you have a lawful basis and should avoid unnecessary sensitive information.

4. Purposes and lawful bases

• Performing the contract: generating previews and PDFs, processing purchases, delivering credits and downloads, and providing requested account features
• Legitimate interests: securing the service, preventing fraud, troubleshooting, maintaining availability, and keeping minimal records of entitlements and support
• Legal obligations: accounting, tax, consumer-protection, and lawful-request compliance
• Consent, where specifically requested for an optional activity; consent may be withdrawn prospectively

5. Payments

Stripe processes checkout and card payments. Payment fields are provided by Stripe, and GlobalDocBiz does not receive your full card number. Stripe receives payment, technical, and transaction information and may use necessary anti-fraud technologies under its own privacy information.

6. Service providers and recipients

• Stripe: embedded checkout, payment processing, tax calculation, and fraud prevention
• Lovable Cloud and its infrastructure providers: website hosting, server processing, database, optional authentication, and purchase/entitlement storage
• Google Fonts: font files are requested from Google servers, which can receive IP address and request information
• Professional advisers or authorities only where necessary to establish rights or comply with law

7. International transfers

Some providers may process data outside Germany or the European Economic Area. Where GDPR requires it, transfers are based on an adequacy decision, approved standard contractual clauses, or another lawful safeguard. Provider privacy notices contain further details.

8. Retention

Local drafts and preferences remain in your browser until you delete them or clear site data. Purchase, accounting, and entitlement records are retained for as long as needed to provide access, handle disputes, prevent fraud, and meet statutory retention duties. Support correspondence is retained only as long as needed for the request and applicable legal claims. Security logs are kept for a proportionate period.

9. Security

We use proportionate technical and organizational safeguards, including encrypted transport, access controls, restricted database permissions, and verified payment notifications. No internet service can guarantee absolute security.

10. Your GDPR rights

• Access and a copy of your personal data
• Correction of inaccurate data
• Deletion, where no legal reason requires continued processing
• Restriction of processing and objection to processing based on legitimate interests
• Data portability for applicable data
• Withdrawal of consent without affecting earlier processing
• A complaint to a competent data-protection supervisory authority, including the authority for your habitual residence or workplace

11. Exercising your rights

Email support@globaldocbiz.com. We may request proportionate information to verify your identity. There is normally no fee, but manifestly unfounded or excessive requests may be handled as permitted by law.

12. Changes

We may update this policy when our service or legal duties change. The current version and effective date will remain available here.