Information security policy

• Personal Data: Any information that can identify an individual (full name, phone number, ID card number, email address, etc.).
• Sensitive Data: Payment information, transaction codes, identifying information.
• Users: Individuals or organizations that register, log in, or access Docx247.com.
• Third Parties: Payment partners, storage providers, and law enforcement agencies with the right to request data.

3.1 Personal Information

• Basic: Full name, email, phone number, address.
• Transactions: Bank information, transaction code, invoice, document purchase history.
• Verification: Citizen Identification Card, passport when verification is needed or in case of legal disputes.

3.2 System Information & Behavior

• IP address, cookies, access device, browser, operating system.
• Login history, usage time, page views, click behavior.

3.3 Generated Data

• User-uploaded content (documents, images, comments).
• History of complaints, feedback, and exchanges with support.

• Directly provided: information entered by users during registration, payment, and contact.
• Automatedly collected: logging systems, cookies, and behavioral analytics tools.
• Third-party: payment partners, identity verification.

• Service provision: Account creation, order processing, payment verification.
• User support: Answering questions, handling complaints, technical support.
• Product development: Behavior analysis, interface optimization, personalization of user experience.
• Marketing information: Sending notifications and promotions (users have the right to opt out).
• Legal compliance: Providing data as legally required by competent authorities.

6.1 Storage

• Data is stored on ISO 27001–certified servers or reputable cloud services.
• Data is stored throughout the period in which the user uses the service; upon a deletion request, the data will be permanently removed within 30 days, unless the law requires longer retention.

6.2 Security Measures

• Technical: SSL/TLS encryption, firewall protection, DDoS mitigation, regular malware scanning.
• Organizational: strict access control, access logging, requiring staff to sign confidentiality agreements.
• Monitoring: real-time alerts when unauthorized access or data leaks are detected.

Docx247.com does not sell personal data to third parties. Data is only shared when:

• There is user consent.
• It is necessary for the transaction process (e.g., sharing with a payment gateway).
• There is a legal request from a government agency.
• To protect the life, property, or legal rights of the user in an emergency situation.

• Right to know: To be informed about the type of data collected, its purpose, and where it is stored.
• Right to access & edit: To proactively modify information in your account.
• Right to request deletion: Submit a request via email; the system will process it within 30 days.
• Right to object: Refuse to receive marketing emails or request that data processing be stopped.
• Right to complain: Submit a complaint about a security breach to the support email.

• Used to remember logins, save search preferences, and support behavioral analysis.
• Users can disable cookies, but some features (payment, shopping cart saving) may be restricted.

• Users submit deletion requests via email hotrodocx247@gmai.com.
• Identity verification system (requires ID card/registered email).
• Data deletion within 30 days, confirmation sent upon completion.
• Data deletion log is saved for auditing purposes.

In the event of a data breach, Docx247.com will:

• Notify users within 72 hours.
• Report to the relevant government agency as required.
• Implement corrective measures and security upgrades.

The policy may be changed periodically to comply with legal requirements and operational needs. New versions will be published on the website and will take effect immediately upon posting.

• Email: hotrodocx247@gmail.com
• Website: https://docx247.com
• Support: 24/7 online chat on website