Last updated: August 5, 2026
This Privacy Policy explains how Reylan Solutions (PTY) Ltd, trading as Docustrip (“Docustrip”, “we”, “us”), a company registered in South Africa, collects, uses, and protects information when you use our invoice-processing platform (the “Service”). By using the Service, you agree to the collection and use of information as described here. Under South Africa's Protection of Personal Information Act (POPIA), Reylan Solutions (PTY) Ltd is the “responsible party” for personal information processed through the Service.
Account information. When you sign up, we collect your name, email address, and a securely hashed password (or, if you sign in with Google, your Google account profile information).
Documents you upload. Invoices and related documents (PDF, JPG, PNG) that you upload for processing, along with the structured data our system extracts from them (vendor names, amounts, dates, line items, tax fields, currency, and similar invoice fields).
Billing information. Subscription and payment details are handled by our payment processor, Polar.sh. We do not store your full card details ourselves — we retain only your plan tier, subscription status, and billing history metadata.
Integration data. If you connect a third-party accounting system (currently Xero), we store the authorization tokens needed to push data on your behalf, and the identifiers of the organization you connect.
Usage and technical data. We collect information such as your document upload counts, plan usage, IP address, browser/device information, and general product analytics, to operate and improve the Service.
We use the information we collect to:
To extract structured data from your invoices, uploaded documents are sent to a third-party AI provider (Anthropic) for automated processing. Anthropic processes this content on our behalf to return extracted data to our platform. We do not use your documents to train our own models. Because uploaded invoices may contain your own customers' or suppliers' business information, please only upload documents you have the right to process.
We do not sell your personal information. We share information with the following categories of service providers (“subprocessors”), solely to operate the Service:
We may also disclose information if required by law, or to protect the rights, safety, and security of Docustrip, our users, or the public.
We retain your account data and uploaded documents for as long as your account is active. If you delete your account, we will delete or anonymize your personal data and documents within a reasonable period, except where we are required to retain certain information for legal, tax, or accounting purposes, or where data persists briefly in backups before rotating out.
We use industry-standard measures to protect your information, including encryption of data in transit, access controls on our infrastructure, and secure password hashing. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Under South Africa's Protection of Personal Information Act (POPIA), and similar laws in other jurisdictions, you have the right to:
Our designated Information Officer for POPIA purposes can be reached at hello@docustrip.com. To exercise any of the rights above, contact us at that address and we will respond within a reasonable timeframe and in accordance with applicable law.
You can also delete individual documents, disconnect integrations, or close your account directly from your dashboard settings at any time.
As a South African company using international service providers (including those listed in Section 4), we routinely transfer personal information outside South Africa. Where we do so, we take steps required by POPIA section 72 to ensure the recipient is subject to a law, binding corporate rules, or an agreement that provides an adequate level of protection substantially similar to POPIA, or that the transfer is otherwise necessary to perform our contract with you.
We use a small number of strictly necessary cookies: a session cookie to keep you signed in, and, only if you choose to connect Xero, a short-lived cookie used to secure that connection process. We do not use advertising or cross-site tracking cookies.
We use cookieless analytics and performance-monitoring scripts (Vercel Analytics and Speed Insights) to understand how the Service is used and to monitor performance. These do not set cookies or store identifiers in your browser. You can control cookies through your browser settings, though disabling the session cookie will prevent you from staying signed in.
The Service is intended for business use and is not directed at, or intended for use by, children. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The “Last updated” date above reflects the most recent revision.
If you have questions about this Privacy Policy or how we handle your data, contact us at hello@docustrip.com.