The short version: Documentos is a tool built to make your life easier, not to harvest your data. We collect only what's needed to make the app work, we don't sell your information to anyone, and you can ask us to delete everything at any time.
Who we are
Documentos is an independent product created and operated by Angelique Fletcher, based in Portugal. If you have any questions about your data, you can reach us directly at hello@documentos-app.com.
What data we collect and why
Your account information
When you sign up, we collect your email address and, once you're in the app, your preferred first name. You can optionally add your birthday (day and month only — never the year) from your Account page. We use this to personalise your experience and your reminders. We never ask for your surname, address, or any financial information.
Document images and details
When you scan a document or an official letter, the photo you upload is processed by an AI vision tool to read the key details — the document type, expiry date, and reference numbers. The extracted details are saved to your personal account, and you always review them before relying on them. AI processing is performed solely to fill in these fields on your behalf — your images are not used to train AI models, and they are not shared beyond what is necessary to perform the extraction. This applies to everything you store, whether it expires (like a residency permit) or not (like a NIF document or a marriage certificate) — all of it is stored privately and is only accessible to you. No one else — including us — routinely accesses your uploaded images.
Appointment information
Any appointments you add are stored privately in your account and are visible only to you. If you add a location, it's saved as simple text — we don't use any mapping or location service.
Usage data
Our hosting platform records basic visit information each time a page loads: which page was opened, your browser and operating system, your language setting, where you arrived from, and the time. It also stores a random session number in a cookie on your device for about 20 days, so that repeat visits can be counted as one person rather than several. This information is handled by Tinybird, the analytics provider our hosting platform uses.
We want to be precise about what this does and doesn't cover. It records that a page was opened. It does not include your name, your email address, your account, or anything inside it — no documents, no images, no expiry dates, no ID or NIF numbers. Nothing you store in Documentos forms any part of it.
This is built into our hosting platform and we can't currently switch it off. If that changes, we will. We don't use advertising pixels, and we don't track you across other websites.
What we don't do
We do not sell your data to anyone, ever. We do not share your personal information with third parties for marketing purposes. We do not use your document images for any purpose other than extracting your renewal and booking details. We do not store your payment information — this is handled securely by Stripe if and when you subscribe.
Where your data is stored
Your data is stored with Supabase, on infrastructure located in the European Union (Ireland), encrypted in transit and at rest. Your documents and images live in private storage that only your account can access.
We work with a small number of specialist providers, each for one job:
- Supabase (EU) — database and private document storage;
- Stripe — payment processing; we never see or store your card details;
- Mistral AI (France) — reads the details from documents you scan, solely to fill in your fields;
- Resend — delivers our emails to you;
- Lovable — hosts the application.
If your access ends
If your trial ends without subscribing, or your subscription ends, your account is locked but your data is kept safe for 30 days. During that window you can still sign in to download a full copy of your data or delete your account immediately. If you do nothing, all your data — documents, images, and appointments — is permanently and irreversibly deleted after 30 days. We email you before this happens, and send a confirmation once it's done.
Your rights under GDPR
You are protected by the General Data Protection Regulation (GDPR). This means you have the right to access the personal data we hold about you, correct any inaccurate information, request that we delete your account and all associated data, and withdraw consent at any time.
To exercise any of these rights, simply email us at hello@documentos-app.com with the subject line "Data Request" and we will respond within 30 days. To delete your account entirely, you can also do so from the My Account section inside the app.
Cookies
Documentos uses a small number of cookies:
- Login and session cookies, which keep you signed in. The app can't work without them.
- A security cookie set by Cloudflare (__cf_bm), which distinguishes real visitors from automated bots. It lasts about 30 minutes.
- A visit-counting cookie (session-id), described under "Usage data" above. It lasts about 20 days.
We don't use advertising or tracking cookies, and we never share cookie data with advertisers. When you subscribe, payment happens on Stripe's own secure checkout page, which uses Stripe's strictly necessary payment scripts.
A note on document security
We understand that you are uploading photos of sensitive personal documents — driving licences, residency permits, insurance certificates, and more. We take this responsibility seriously. Your documents are stored in your private account and are not visible to other users or shared with any third party. We strongly recommend using a secure password or signing in with Google for the strongest account protection.
Account deletion
You have the right to request deletion of your Documentos account and all associated personal data at any time. Self-service deletion is immediate and irreversible: sign in, go to your account settings, choose "Delete my account", and type DELETE to confirm. Full details, including what gets deleted and how to export your data first, are on the account deletion page.
If you cannot sign in, email us at hello@documentos-app.com from the address on the account, with the subject line "Delete My Account". We will act on your request as soon as we can, and within 30 days at the latest.
Once deleted, your documents, appointments, people, and personal information are permanently removed from our systems. When your data is deleted — whether you requested it or your 30-day window ended — we send you an email confirming it's done.
Please note that payment records held by Stripe may be retained for legal and financial compliance purposes as required by law.
Changes to this policy
If we make significant changes to how we handle your data, we will notify you by email before those changes take effect. The "last updated" date at the top of this page will always reflect the most recent version.
Questions?
We're a small, independent team and we genuinely care about getting this right. If anything here is unclear or you have a concern, please email us at hello@documentos-app.com — a real person will read it and respond.