Privacy policy

Who we are and how to reach us

DocuBorder (www.docuborder.com) sells short, fill-in-the-blanks travel and permission documents. We are not a law firm and do not provide legal advice.

To ask a question or make a request about your data, write to us at legal@docuborder.com. Please include your order number, which is shown on your order page.

What we collect

The answers you type into a form (or that an AI agent submits for you) to build your document. Depending on the document this can include names, dates of birth, passport or other ID numbers, addresses, phone numbers and email addresses of adults, and details about a child: name, date of birth, place of birth, nationality and passport number. For the medical authorization it can also include allergies, conditions, medications, insurance and physician details. We collect only what the document template asks for.

Order details: the document you chose, the language, the price, the status of your order, the time it was created, paid and delivered, and a fingerprint (hash) of your answers that lets us check that the same answers always produce the same document.

Payment: you pay on a page hosted by Stripe. We never see or store your card number or card details. Stripe tells us whether the payment succeeded and sends us the identifiers of the payment. Stripe collects your email address for the receipt; we do not store it in our own database.

Technical data: like most websites, our hosting provider keeps standard server logs (such as IP address, time and the page requested). Our own logs record what happened (for example, that an order was paid) but never the answers you typed. For a short time our servers also count requests per network address to slow down abuse.

What we do with it

We use your answers only to show you a free preview, to generate your PDF after you pay, and to let you download it again while it is kept. We use order details to run the service, to answer your questions, to issue refunds and to keep the financial records the law requires.

We do not sell your data, we do not use it for advertising, and we do not use it to build profiles. No one at DocuBorder reads your answers as part of the normal operation of the service, and the text of your document is produced by a fixed template, not written or edited by an AI model.

How it is protected

Your answers are encrypted before they are stored, and the key is kept apart from the database. The generated PDF is stored in a private file store and is reachable only through a download link that expires after a few minutes. Your order page is reachable only with a secret token that stays in your browser (or with the AI agent that created the order). Anyone who has that token can see the order, so do not share the page address.

No system is perfectly secure. If we learn of a breach that affects your data we will tell the people affected as the law requires.

How long we keep it

30 days after your document is delivered, an automatic job deletes your encrypted answers and your PDF. If an order is created but never paid, the same deletion happens 30 days after it was created. A watermarked preview is kept only briefly: its link expires after about an hour.

After that deletion we keep a small order record without your answers: the order number, document, language, price, status, dates, the Stripe payment identifiers and the fingerprint of the answers. We keep it because tax, accounting and payment rules require financial records. Download and save your PDF; after the deletion we cannot produce it again.

Who else handles your data

Stripe processes the payment. Supabase hosts our database and the private file store. Vercel hosts the website and the programs that run it, and measures page views. They handle data only to provide those services to us.

These providers operate in the United States and may process data there. Our database and private file store run in the US West (Oregon) region.

We do not otherwise share your data, except when the law requires it or to protect the service from fraud or abuse.

Children and minors

The service is for adults. Parents, guardians and other adults enter information about a child in order to make a document for that child, and we use it only for that purpose. We do not knowingly collect information from children directly. If you believe a child has used the service on their own, write to us and we will delete the data.

Cookies, storage and analytics

We do not set cookies and we do not use advertising or tracking tools. Your browser keeps the secret token of your order in its session storage so that the order page can show your download; closing the tab clears it.

We measure visits with Vercel Web Analytics, which counts page views. For each page view Vercel may store the time, the page address, the site that referred you, an approximate location (country, region and city), and your device type, operating system and browser. We remove order numbers, query strings and fragments from page addresses before they are sent, so no order, name or answer reaches it. Vercel says it uses no third-party cookies and tells visitors apart by a hash created from the request, which it discards after 24 hours.

Your choices

We have no accounts, so there is nothing to log in to. To ask us to delete your answers and PDF before the 30 days are over, to see what we hold, or to correct something, write to legal@docuborder.com with your order number. We will confirm that the request comes from the person who placed the order before we act, and we will tell you if the law lets us keep part of the record.

Depending on where you live, you may have additional rights over your personal data. Tell us what you want and we will answer in a reasonable time.

Changes to this policy

If we change this policy we will update the page and its date. This page was last updated on 2026-10-19.