Privacy Policy
Effective Date: June 15, 2026. This policy explains how Docdril collects, processes, protects, and deletes personal information across our website and business operations.
01 · What is a Privacy Policy?
A privacy policy is a legally required disclosure explaining what personal data an organization collects from website visitors, why it is gathered, and your statutory rights to access or delete it under global data protection laws (GDPR, CCPA).
02 · The Docdril Stand
We practice radical data minimization. We only collect the bare operational essentials required to review your brief and execute your project. We never sell your data, never broker mailing lists, and securely delete staging assets following project delivery.
Overview & Scope
Docdril™ (“we”, “our”, or “us”) is a creative technology and systems engineering studio providing digital development, content production, automated workflows, and consulting services to domestic and international clients.
We believe in straightforward, privacy-respecting practices. We do not operate advertising networks, behavioral profiling trackers, or covert analytics pixels on our public marketing website. When you communicate with us or submit a request, your information is processed strictly for legitimate business objectives and handled with rigorous access controls.
Information We Collect & Why
Service & Project Enquiries (Contact & Enquiry Forms)
Data Collected: Full name, email address, phone number (optional), WhatsApp contact (optional), selected service category, budget range, and project details.
Purpose & Legal Basis: Reviewing project scope, assessing technical feasibility, preparing commercial proposals, and direct business communication (contractual necessity & legitimate interests).
Newsletter Subscription
Data Collected: Email address.
Purpose & Legal Basis: Delivering occasional studio updates, engineering insights, and service releases (affirmative opt-in consent). You can opt out anytime via our Unsubscribe page or the link in any newsletter.
Client Testimonials & Feedback
Data Collected: Name, role, company name (optional), star rating, written feedback, and optional profile image link.
Purpose & Legal Basis: Public display of client reviews and social proof on marketing materials. Publication occurs strictly after affirmative consent is checked during submission. Clients may withdraw authorization at any time for prompt removal.
Business System & Workflow Audits
Data Collected: Name, work email, business type, team size, tools used, and operational challenges.
Purpose & Legal Basis: Diagnostic review of business workflows to produce recommendations and quotes. Notice: We explicitly instruct users never to transmit credentials, passwords, or secret API keys in audit descriptions.
Legitimate Business Development & Outreach
In the ordinary course of business, Docdril may engage prospective clients through referrals, professional recommendations, inbound requests, and legitimate business-to-business communications. We respect opt-out requests immediately.
Data Retention & Deletion Schedules
We do not hoard personal records indefinitely. We apply structured retention intervals based on the commercial purpose:
- Completed Enquiries (7 Working Days): Once an enquiry has been evaluated and marked as completed, resolved, or closed, the associated lead record is scheduled for automated deletion within 7 working days (excluding weekends). Active or open proposals remain accessible during ongoing business discussions.
- Newsletter Subscribers: Stored while your subscription is active. If you unsubscribe via our website, your status is updated immediately to stop all future broadcasts.
- Client Testimonials: Displayed for the duration of the promotion period authorized by the client, or until the client requests removal.
- Client Project Files & Production Assets: During active development or video production, assets are managed securely. Following project sign-off and final balance settlement, working production assets are decommissioned from active production workspaces.
- Legal & Financial Records: Invoices, payment records, and tax-related documentation are retained for statutory periods mandated by applicable tax and accounting laws.
Confidentiality & Security Measures
Information submitted through our website is received, managed, and securely accessed by authorized members of the Docdril team strictly for the business purpose stated at collection.
We enforce technical and organizational protections:
Non-Disclosure Agreements (NDAs): We respect intellectual property and trade confidentiality. For enterprise engagements or projects involving proprietary technical architectures, custom bilateral NDAs are readily executed upon client request prior to sharing confidential materials.
Interactive Studio Assistant (Pluto AI)
Our website features a native, in-house studio assistant (Pluto AI) directly integrated into the client experience to help visitors navigate Docdril services, pricing calculators, sprint models, and FAQs in real time.
- Purpose: Providing immediate conversational guidance, instant cost estimations, and service navigation without external tracking.
- Model Training: Client interactions and conversation queries are processed strictly to generate real-time responses and are never harvested or sold to train public AI foundation models.
- Microphone Permission: If you choose to interact using speech-to-text, browser microphone access is requested strictly for local audio capture during active sessions. You may deny microphone access at any time and use standard text input.
- Advisory: Please do not share private credentials, passwords, financial account data, or sensitive personal data with the conversational assistant.
Third-Party Embedded Content & Infrastructure
To showcase our work and maintain infrastructure, we utilize select service providers:
- Hosting & Edge Delivery: The website is deployed using Vercel. Server infrastructure records transient operational logs (e.g., request URLs, IP addresses, response codes) strictly for security monitoring, DDoS mitigation, and system health.
- Vimeo Showcases: Embedded video showcases are loaded with the
dnt=1(Do Not Track) parameter enabled, instructing Vimeo not to place tracking cookies or perform behavioral user tracking. - Spotify Audio Embeds: Audio samples use a click-to-load design. No Spotify iframe is rendered and no third-party connection to Spotify is established until you explicitly click to play the audio.
- Client Showcase Media: All client videos and case study materials showcased on the website are published strictly following client authorization. We do not operate a public video-upload facility.
Your Data Protection Rights
Depending on your location, you hold statutory rights regarding your personal information under the Indian Digital Personal Data Protection Act (DPDP Act), European Union General Data Protection Regulation (GDPR), UK Data Protection Act, or California Consumer Privacy Act (CCPA/CPRA):
- Right of Access & Confirmation: You may request confirmation of whether we process your personal data and obtain a summary.
- Right to Correction & Erasure: You may request that inaccurate information be corrected or that your records be deleted from our systems.
- Right to Withdraw Consent: Where processing relies on consent (such as testimonials or newsletter subscriptions), you may withdraw consent at any time without penalty.
- Right to Grievance Redressal: You may contact our designated contact point with any questions or concerns regarding the processing of your data.
To exercise any of these rights, contact us at privacy@docdril.com or info@docdril.com. We respond to verified requests within statutory timeframes.
Contact Us & Grievances
If you have questions regarding this Privacy Policy, our data practices, or wish to submit a data subject request, please contact: