Privacy Policy

Docket AI Ltd (“Docket”, “we”, “us”) operates the Docket AI service at docketbusiness.com and connected WhatsApp Business numbers. We are the data controller for the personal information described in this policy.

Registered office: [YOUR REGISTERED ADDRESS]. Company number: [XXXXXXXX]. ICO registration: [ZAXXXXXXX]. If you need to reach us about privacy, email [email protected].

Account details. Name, business name, phone number, and email you give us when you sign up or during onboarding.

Business content. Documents you create (invoices, quotes, receipts, agreements), customer records (name, contact, phone), template designs, and business settings such as your logo, address, and currency.

WhatsApp messages. When you send Docket a WhatsApp message, we receive the message text, media attachments, sender number, and timestamps through the WhatsApp Business Cloud API. We use these to understand your request and generate documents on your behalf.

AI chat. When you use the in-app chat, we send your messages and relevant business context to our AI provider (see “Sub-processors” below) to produce a reply.

Technical data. IP address, browser and device information, and log data needed to keep the service running and secure.

Payment data. Billing is handled by our payment processor; we do not store full card numbers. We keep the subscription status, plan, and invoice history associated with your account.

• To provide the Docket service — creating documents, sending them, and tracking payment.
• To reply to your WhatsApp messages and AI chat requests.
• To keep records that let you (and, where required, HMRC or your accountant) audit your invoices and receipts.
• To send you service messages such as billing notices, security alerts, and material policy changes.
• To detect abuse, prevent fraud, and keep the service secure.
• To improve the product — always using aggregated or de-identified data unless you have given us specific permission for anything more.

Contract. Most processing is necessary to provide the service you have asked for — creating documents, replying on WhatsApp, taking payment.

Legitimate interest. Security, fraud prevention, and improving the product using de-identified data — balanced against your rights.

Legal obligation. Keeping records where UK tax or company law requires it.

Consent. Any marketing beyond service messages, or optional integrations you switch on explicitly. You can withdraw consent at any time in your settings.

Docket uses AI models from third-party providers to generate document drafts and reply to your chat. Your prompts and the business context we attach are sent to the provider only for the length of that request.

We do not use your messages or documents to train AI models — ours or anyone else’s. Our contracts with AI providers require the same.

We keep the list of sub-processors short and named:

• Meta Platforms Ireland Ltd — WhatsApp Business Cloud API (message transport).
• Anthropic PBC — AI model for chat replies and document drafting.
• [Payment processor] — subscription billing and card processing.
• [Hosting provider, UK region] — application and database hosting.
• [Email provider] — transactional email delivery.

We will notify Pro and Business customers before adding or replacing a sub-processor that handles personal data.

Active account data is kept while your account is active and for up to 12 months after cancellation, so you can reactivate without losing history.

Documents and customer records can be exported or deleted from your settings at any time. If you delete your account, we remove your personal data within 30 days except where we must keep records to meet a legal obligation (typically 6 years for UK tax purposes).

WhatsApp messages older than 12 months are automatically pruned unless they are attached to a document.

Application data is hosted in the United Kingdom. Some sub-processors — WhatsApp, our AI provider, our payment processor — may process data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions to keep your data protected to a UK standard.

You have the right to access, correct, export, restrict, or delete the personal data we hold on you, and to object to processing based on legitimate interest. Most of this you can do yourself in your Docket settings.

To exercise any right you can’t do in-app, email [email protected]. We’ll respond within 30 days. If you’re not satisfied, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

We use a small number of strictly-necessary cookies to keep you signed in and to remember your preferences. We do not use advertising cookies. We use privacy-friendly analytics that don’t rely on tracking cookies.

If we make a material change to this policy, we’ll email active accounts at least 14 days before the change takes effect. The “last updated” date at the top of the page always shows the current version.

Questions about this policy or how we handle your data? Email [email protected].