Privacy Policy

Docsico (OPC) Private Limited ("Docsico", "we", "us" or "our") respects the privacy of individuals who visit our website, communicate with us, submit enquiries, purchase our services or otherwise interact with Docsico.

This Privacy Policy explains how we may collect, use, process, store, disclose and protect personal information in connection with:

• www.docsico.com;
• enquiry and lead forms;
• our professional services;
• email communication;
• telephone communication;
• WhatsApp and other messaging services;
• social-media platforms;
• advertising platforms;
• payment transactions; and
• other interactions with Docsico.

We process personal information in accordance with applicable Indian law and shall update our practices as additional provisions of India's data-protection framework become applicable.

By providing personal information to Docsico or using our Website or Services, you acknowledge the practices described in this Privacy Policy.

Where consent is legally required for a particular processing activity, Docsico shall obtain or rely upon such consent in accordance with applicable law.

Depending upon how you interact with Docsico, we may collect the following categories of information.

2.1 Personal and Contact Information

This may include:

• name;
• business name;
• brand name;
• email address;
• telephone/mobile number;
• WhatsApp number;
• city;
• state;
• country;
• postal address; and
• other contact information voluntarily provided by you.

2.2 Business and Service Information

Where you enquire about or purchase our Services, we may collect information such as:

• business category;
• product category;
• marketplace interest;
• service requirements;
• company/firm information;
• GST or other business-registration details;
• marketplace information;
• brand information;
• website information;
• product details;
• service history;
• project requirements; and
• information necessary to provide the requested Service.

2.3 Marketplace and Account Information

Where required to provide marketplace onboarding, account management, advertising, website or related Services, you may provide Docsico with:

• marketplace account information;
• website access details;
• hosting/domain information;
• advertising-account information;
• social-media account information;
• login credentials;
• account identifiers;
• product/catalogue information;
• seller information;
• verification information; and
• other operational information necessary for Service delivery.

Clients should provide access only where reasonably required for the agreed Service.

2.4 Documents Provided for Services

Depending upon the Service, Clients may provide business or verification documents required by marketplaces, service providers or authorities. Such documents may include, where relevant:

• GST information;
• business-registration documents;
• tax-related information;
• licences;
• certificates;
• bank/payment-related verification documents;
• authorised-signatory information;
• identity-related documents where required for the applicable Service; and
• marketplace-required documentation.

Docsico shall use such information only for legitimate business, contractual, compliance and Service-delivery purposes.

2.5 Payment and Transaction Information

We may collect information relating to:

• invoices;
• payment status;
• transaction references;
• amounts paid;
• refunds;
• billing information; and
• payment history.

Payments may be processed through PhonePe, banking channels or other authorised payment gateways or payment methods.

Docsico ordinarily does not directly store complete card details, UPI PINs, banking passwords or similar financial authentication credentials handled directly by payment processors.

Payment providers may independently process information in accordance with their own privacy policies and legal obligations.

2.6 Communications

We may retain communications made through:

• email;
• WhatsApp;
• Telegram;
• website forms;
• social-media messages;
• telephone;
• customer-support channels; and
• other authorised communication methods.

This may include enquiries, Service instructions, approvals, complaints, feedback, support requests and other business communications.

Where telephone calls are recorded, Docsico shall handle such recordings in accordance with applicable law and reasonable business requirements.

2.7 Website and Technical Information

When you use our Website, certain information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• referring pages;
• pages visited;
• approximate location derived from technical information;
• time spent on the Website;
• interaction information;
• advertisement interaction;
• cookie identifiers; and
• similar technical information.

2.8 Advertising and Lead Information

If you interact with Docsico advertisements or lead forms on platforms such as Google, Meta, Facebook or Instagram, we may receive information that you voluntarily provide through those platforms. This may include:

• name;
• mobile number;
• email;
• city/location;
• business details;
• service interest;
• enquiry information; and
• information contained in the applicable lead form.

Such platforms may also process information independently under their own privacy policies.

We may collect personal information:

• directly from you;
• through our Website;
• through enquiry/contact forms;
• through telephone calls;
• through WhatsApp or messaging services;
• through email;
• through social-media platforms;
• through advertising lead forms;
• during meetings or consultations;
• during Service onboarding;
• through payment transactions;
• through cookies and analytics technologies;
• from representatives authorised by your organisation; or
• from third-party platforms where you have submitted an enquiry or authorised information sharing.

Docsico may use personal information for legitimate business and Service-related purposes, including:

• responding to enquiries;
• contacting prospective customers;
• understanding Service requirements;
• preparing quotations and proposals;
• onboarding Clients;
• providing and managing Services;
• marketplace onboarding and account-management activities;
• website-development and maintenance activities;
• advertising and marketing Services;
• social-media-management Services;
• product photography and creative Services;
• customer support;
• communicating project updates;
• processing payments, invoices and refunds;
• maintaining business and transaction records;
• verifying Client instructions;
• preventing fraud, misuse and unauthorised activity;
• protecting Docsico's systems, Clients and business;
• resolving complaints and disputes;
• complying with legal, accounting, tax and regulatory requirements;
• analysing Website and advertising performance;
• improving our Website, Services and customer experience;
• maintaining customer relationship and Service history; and
• sending marketing or promotional communications where permitted by applicable law.

We shall not intentionally process personal information for purposes materially unrelated to the purpose for which it was collected unless permitted by applicable law or appropriate consent/authorisation has been obtained.

Where legally permitted, Docsico may use contact information to communicate about:

• Services;
• offers;
• updates;
• promotions;
• marketplace opportunities;
• training;
• business information; and
• other Docsico offerings that may be relevant.

Where consent is required, marketing communication shall be based on appropriate consent.

Recipients may request to stop promotional communication using the unsubscribe/opt-out method available in the communication or by contacting Docsico.

Opting out of promotional communication will not prevent Docsico from sending necessary transactional or Service-related communications.

Docsico may use cookies and similar technologies to operate and improve the Website.

These technologies may help us:

• remember Website preferences;
• understand Website usage;
• analyse visitor behaviour;
• measure traffic;
• identify Website performance issues;
• understand advertising effectiveness;
• measure conversions;
• improve marketing campaigns; and
• display more relevant advertising.

Our Website may use technologies or services provided by third parties such as:

• Google Analytics;
• Google Ads;
• Google Tag Manager;
• Meta Pixel;
• Facebook/Instagram advertising technology; and
• other analytics or advertising tools.

These technologies may collect technical, browser, device and Website-interaction information.

Google, Meta and other third-party providers may independently process information according to their own privacy policies and technologies.

Docsico does not control the independent data-processing practices of these third parties.

Depending on the technologies implemented on the Website and requirements of applicable law, users may be provided with options relating to cookies or tracking technologies.

Users may also restrict or delete cookies through their browser settings.

Disabling certain cookies may affect some Website functions, analytics or personalised features.

Docsico does not sell or rent personal information as a standalone commercial product.

We may disclose or make personal information available to third parties where reasonably necessary for the purposes described in this Policy. These may include:

• payment processors;
• marketplaces;
• advertising platforms;
• analytics providers;
• website hosting providers;
• cloud/storage providers;
• communication providers;
• CRM/business-management systems;
• WhatsApp-related service providers;
• email providers;
• technology vendors;
• professional advisers;
• accountants;
• auditors;
• legal advisers;
• consultants;
• contractors or service providers supporting Docsico's operations; and
• government, regulatory or law-enforcement authorities where legally required.

We seek to disclose only information reasonably necessary for the relevant purpose.

Where Docsico is engaged to assist a Client with services involving Amazon, Myntra, AJIO, Nykaa, Flipkart, Etsy, eBay or another marketplace/platform, Client information may need to be submitted to or processed through the relevant third-party platform.

Once information is submitted to a marketplace or third-party platform, that platform may independently process and retain the information under its own terms, policies and legal obligations.

Docsico cannot control the independent privacy or retention practices of such third parties.

Docsico may use third-party technology and service providers to support our business.

Where reasonably applicable, we expect service providers handling information on our behalf to use appropriate confidentiality and security measures and to process information for the permitted purpose.

However, some third parties, such as marketplaces, payment providers and advertising platforms, may process information independently rather than solely on Docsico's behalf.

Some technology providers, marketplaces, advertising platforms, cloud providers or other third-party services used by Docsico may process or store information on systems located outside India.

Where cross-border processing is subject to applicable data-protection requirements, Docsico shall handle such processing in accordance with applicable law.

Third-party providers may separately be subject to their own international data-transfer and privacy obligations.

Docsico shall retain personal information only for as long as reasonably necessary for the purposes for which it was collected or for another purpose permitted by applicable law.

Retention periods may depend upon:

• duration of the Client relationship;
• nature of the Service;
• contractual requirements;
• transaction history;
• legal requirements;
• taxation requirements;
• accounting requirements;
• regulatory requirements;
• dispute resolution;
• fraud prevention;
• security requirements;
• legal claims; and
• legitimate record-keeping requirements.

When personal information is no longer reasonably required and no legal or legitimate requirement justifies its continued retention, Docsico may delete, anonymise or securely dispose of the information in accordance with applicable law.

Docsico's role as a Service provider should not be treated as permanent data storage, credential storage or archival storage for the Client.

Following completion, expiry, termination or handover of a Service, Docsico is not contractually required to permanently preserve Client project files, account credentials or operational data unless separately agreed.

Clients are responsible for keeping their own copies of:

• usernames and passwords;
• marketplace credentials;
• website credentials;
• hosting/domain information;
• final photographs;
• final videos;
• final creative files;
• reports;
• marketplace data;
• product/catalogue information;
• business records; and
• other Deliverables supplied during the Service.

Docsico may delete such Service-related material when it is no longer required, subject to applicable legal, contractual, accounting, security, dispute-preservation and privacy obligations.

This section does not require Docsico to delete records that it is legally entitled or required to retain.

Clients should not assume that Docsico will indefinitely retain copies of old project material.

Where a former Client later requests old:

• photographs;
• files;
• reports;
• credentials;
• catalogue information;
• marketplace information; or
• other Service data,

Docsico may assist only where the requested information remains reasonably available and where disclosure remains appropriate and lawful.

Historical availability is not guaranteed.

Where extensive retrieval, restoration, migration, recreation or account-recovery work is required, such assistance may constitute a separately chargeable Service.

Docsico takes reasonable technical and organisational measures intended to protect information against:

• unauthorised access;
• unauthorised disclosure;
• misuse;
• alteration;
• loss;
• destruction; and
• other reasonably foreseeable security risks.

Depending on the nature of the information and Service, these measures may include reasonable access restrictions, authentication, account controls and secure technology/service providers.

However, no internet transmission, electronic communication, cloud service or information-storage system can be guaranteed to be completely secure.

Accordingly, Docsico cannot guarantee absolute security.

If Docsico becomes aware of a personal-data breach or security incident that requires notification or action under applicable law, Docsico shall take such steps as are required by applicable law.

Clients should promptly notify Docsico if they become aware of unauthorised access to credentials or other information relevant to an active Docsico Service.

Subject to applicable law and its commencement/applicability, individuals may have rights concerning personal data processed by Docsico. These may include rights to:

• obtain information about personal-data processing;
• request access to information concerning personal data;
• request correction of inaccurate personal data;
• request completion/update of appropriate personal data;
• request erasure where legally applicable;
• withdraw consent where processing is based upon consent;
• seek grievance redressal; and
• exercise other rights available under applicable data-protection law.

Certain requests may be limited where Docsico is legally required or permitted to retain information.

Docsico may take reasonable steps to verify the identity and authority of a person making a privacy request before acting upon it.

Where personal-data processing is based on consent, an individual may withdraw consent using the method made available by Docsico or by contacting us.

Withdrawal of consent shall not affect processing lawfully carried out before such withdrawal.

Where information is necessary for Docsico to fulfil a Service or contractual obligation, withdrawal of consent or access may affect Docsico's ability to continue providing the relevant Service, subject to applicable law.

Individuals may request correction of inaccurate or incomplete personal information or request erasure where such a right is available under applicable law.

Docsico may retain information notwithstanding an erasure request where retention is necessary or permitted for purposes such as:

• compliance with law;
• taxation;
• accounting;
• fraud prevention;
• legal proceedings;
• establishment, exercise or defence of legal claims;
• contractual records;
• dispute management; or
• other legally permitted purposes.

Information independently held by third-party marketplaces, social-media platforms, payment providers or other external services may need to be addressed directly with those providers.

Individuals who have questions or complaints regarding the handling of their personal information may contact Docsico using the details provided in this Privacy Policy.

Docsico shall review privacy-related grievances and respond within a reasonable period and within any shorter period required by applicable law.

Where applicable privacy law provides a further statutory grievance or regulatory mechanism, individuals may exercise those rights after following the applicable process.

Individuals and Clients providing information to Docsico should ensure that information supplied is:

• accurate;
• complete;
• genuine;
• current; and
• not misleading.

Where information changes materially during an active Service, the Client should notify Docsico where the change is relevant to the Service.

Docsico shall not be responsible for consequences caused by materially inaccurate or fraudulent information provided by a Client or user.

Docsico's Website and professional Services are primarily intended for adults and businesses.

Our Services are not intended to be independently purchased or contracted by individuals under the age of 18.

Docsico does not knowingly seek to collect children's personal information for marketing or ordinary commercial-Service purposes.

Where Docsico becomes aware that children's personal data has been collected in circumstances requiring parental consent or other protection under applicable law, Docsico shall take appropriate action in accordance with applicable law.

Parents or lawful guardians who believe a child has provided personal information to Docsico may contact us.

Our Website may contain links to external websites, marketplaces, social-media platforms or other third-party services.

Docsico does not control and is not responsible for the privacy policies, security, content or independent data-processing practices of such third parties.

Users should review the privacy policy of a third-party website or platform before submitting personal information.

Where legally permitted, information may be disclosed or transferred as part of a genuine corporate transaction such as:

• merger;
• acquisition;
• restructuring;
• financing;
• transfer of business/assets; or
• similar corporate event.

Any such processing shall remain subject to applicable legal requirements.

Docsico may preserve, use or disclose information where reasonably necessary to:

• comply with applicable law;
• comply with court orders;
• respond to lawful government or regulatory requests;
• investigate fraud;
• protect Docsico's legal rights;
• protect users or Clients;
• enforce contractual obligations;
• establish or defend legal claims; or
• respond to security incidents.

Docsico may update this Privacy Policy to reflect changes in:

• applicable law;
• privacy requirements;
• technology;
• Website functionality;
• Services;
• third-party platforms; or
• business practices.

The updated version shall be published on this page with a revised Effective Date.

Users are encouraged to review this Privacy Policy periodically.

This Privacy Policy deals with the collection and processing of personal information.

Commercial matters concerning Docsico's Services, including:

• Scope of Work;
• payment;
• refunds;
• source-code ownership;
• intellectual property;
• Service handover;
• Client obligations;
• liability;
• termination; and
• other contractual matters

are governed by Docsico's separate Terms and Conditions and any applicable Service Agreement or quotation.

Where appropriate, this Privacy Policy and Docsico's Terms and Conditions should be read together.

This Privacy Policy shall be governed by applicable laws of India.

Subject to applicable law and any statutory jurisdiction that cannot legally be excluded, matters concerning Docsico arising from this Privacy Policy shall be subject to the jurisdiction of competent courts at Surat, Gujarat, India.

Nothing in this section restricts any statutory right to approach a regulator, board, authority or forum where applicable law provides such a right.

For questions, requests or complaints regarding this Privacy Policy or the handling of personal information, please contact:

Please include sufficient information to allow Docsico to identify and respond to your request.