Privacy Policy.

This Privacy Policy describes how Mezdoc, based in Ahmedabad, India ("Mezdoc", "we", "us") collects, uses, discloses, and safeguards personal data. It applies to mezdoc.com, our API, and our admin product (collectively, "the Service").

1. Data we collect

• Account data: name, work email, organization, role, IP at sign-in.
• Template data: uploaded PDFs, field definitions, dynamic editor content.
• Submission data: the JSON payloads you POST to render PDFs.
• Usage data: API request counts, render durations, error rates.
• Support chat data: if you use the chat on our website, the messages you send and anything else you choose to share there, such as your name or email address, plus your IP address and technical information about your device and browser, such as your browser type and the page you are on. Please do not send passwords, payment card details or other sensitive information we do not need to help you.
• Cookies and similar technologies:
  • In the app (app.mezdoc.com): essential cookies that sign you in and keep you signed in. Google Analytics runs in the app only if you accepted analytics on our website. It then records page views and sign-ups, so we can see which of our Google ads led to a sign-up. It never runs on the forms, embeds and download pages our customers share, or on password-reset pages.
  • Your cookie choice on our website (mezdoc.com): kept in your browser's local storage and in one first-party cookie that our app can read, so a single choice covers both. It lasts 12 months, then we ask again. Display preferences, such as reduced motion, stay in local storage. If your browser sends a Global Privacy Control signal, we treat it as a rejection until you choose otherwise.
  • Google Analytics on our website: loads only after you accept. It then sets analytics cookies and measures which of our Google ads bring visitors and lead to contact requests. Ad personalization always stays off. If you reject or withdraw consent, it stops.
  • Microsoft Clarity (heatmaps and session recordings on our website): loads only after you accept, and masks what you type into forms and demos. If you withdraw consent later, it stops and the page reloads without it.
  • Crisp live chat on our website: the chat we use for customer support. It is not analytics or advertising, and it is available whether or not you accept analytics. When you open the chat, Crisp starts a chat session and sets a chat session cookie, so your conversation carries on as you move between pages or come back later. We use Crisp's Total Privacy Mode, so Crisp does not start that session or set that cookie until you open the chat.
  • Cookieless aggregate website measurement: counts page views, clicks on buttons such as sign-up and contact, use of the live demos and the cost calculator, reading to the end of a blog post, and contact form submissions (with the country chosen for your phone number), plus page-load speed, without cookies. It runs until you choose and after you accept, and stops if you reject.

2. How we use it

• Provide and operate the Service.
• Generate and deliver PDFs you requested.
• Authenticate, secure, and audit access.
• Bill, support, and notify you about service changes.
• Improve the platform, never to train third-party LLMs on your data.

3. Legal basis (GDPR / DPDP)

Performance of contract, legitimate interest (security & product analytics), legal obligation (tax, regulatory), and consent (marketing emails, optional analytics).

4. Data residency

We run on managed cloud infrastructure: a managed application database and encrypted object storage for documents. Data is encrypted at rest and in transit.

If your organization has a specific data-residency requirement, contact us before you sign up and we will tell you plainly whether we can meet it today.

5. Retention

We keep your documents and audit records while your account is active. You can request export or deletion at any time.

6. Sub-processors

We use a short list of sub-processors, each for a specific purpose: application hosting and delivery, a managed application database, encrypted document storage, PDF rendering infrastructure (document content is processed as necessary to generate the PDFs you request), transactional email, and background job processing. Payments are handled by Lemon Squeezy, the merchant of record for your purchase. We will email administrators before adding a new sub-processor.

On our website and in the app we also use these service providers, as described in section 1: Google (Google Analytics, including measuring which of our Google ads bring visitors and sign-ups, only after you accept), Microsoft (Clarity heatmaps and session recordings on our website, only after you accept), Crisp IM SAS (Crisp live chat on our website, for customer support, available whether or not you accept analytics; Crisp processes chat conversations and related technical data on our behalf to provide that support), and a cookieless aggregate website measurement service.

7. Your rights

Access, rectification, erasure, portability, restriction, objection, withdrawal of consent. Users may also have rights under applicable privacy laws, including India's Digital Personal Data Protection Act. To exercise, email hello@mezdoc.com.

8. Children

The Service is not directed to children under 16. We do not knowingly collect data from minors.

9. Privacy contact

Privacy questions, requests and grievances: hello@mezdoc.com. Mezdoc, 8 Ranchod Estate, Nr. Sharda School, Ahmedabad, Gujarat 380026, India.

This summary is provided for clarity and is not a substitute for the full policy. Materially-significant changes are emailed to administrators with at least 30 days notice.