Privacy Policy

1. Controller

DocMuse is operated by The Muse Technology EOOD („Музата Технолоджи“ ЕООД), UIC 208583457, seat and registered address Mladost 3, bl. 316, entr. 2, fl. 8, ap. 45, 1000 Sofia, Bulgaria, represented by its manager Venelin Lyudmilov Smukov. Contact: main@themusetechnology.com.

Data protection questions and requests: main@themusetechnology.com. We have not appointed a Data Protection Officer, as we are not required to.

2. What we collect and why

• Order data — your email address, the document ordered, the amount and the payment reference. Legal basis: performance of the contract. Needed to deliver your file and re-issue a lost link.
• Your form answers — whatever you type into a document you chose to fill out online. Legal basis: performance of the contract. Used only to produce your PDF.
• Withdrawal-waiver record — the timestamp at which you confirmed immediate delivery. Legal basis: legal obligation and our legitimate interest in defending a chargeback.
• Account data (sellers) — email, name, uploaded documents, payout details. Legal basis: contract.
• Usage analytics — page views, fill starts, downloads, purchase events, an approximate country derived from your IP address. Legal basis: our legitimate interest in knowing which documents are useful. We do not build advertising profiles.
• Support correspondence — what you send us and our reply. Legal basis: legitimate interest in answering you.

3. What we never do

• We do not sell or rent personal data.
• We do not read your form answers for any purpose other than generating your document and resolving a support request you raise.
• We never receive your full card number — payment happens on the payment provider's side.

4. Processors we use

We share the minimum necessary data with providers who act on our instructions under data processing agreements: our payment provider (payment and fraud prevention), our email provider (order and account emails), and our hosting and database provider (running the site and storing files). Some may process data outside the EEA under Standard Contractual Clauses.

We also disclose data where a law, court or competent authority requires it.

5. How long we keep it

• Order and invoicing records: as required by Bulgarian accounting and tax law (generally up to 10 years).
• Generated PDFs and form answers: 12 months after purchase, then deleted; download links stop working after 7 days.
• Analytics events: 24 months, in aggregate form thereafter.
• Seller accounts: while the account exists, then as required by accounting law.

6. Your rights

Under the GDPR you may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting past processing.

If you have an account you can delete it yourself from the Account page. Your orders and their invoices are kept for as long as accounting law requires; the account and the name on it are removed. An account that has sold here is deleted by us once the books are closed.

For anything else, write to main@themusetechnology.com and we will respond within one month. You may also complain to the Bulgarian Commission for Personal Data Protection (https://cpdp.bg) or the supervisory authority where you live.

7. Security

Files are stored privately and served only through short-lived signed links. Access to production data is restricted to people who need it. No system is perfectly secure; we notify you and the supervisory authority where the law requires it.

8. Children

The service is not directed at children under 16. We do not knowingly collect their data; tell us if you believe we have.