Privacy Policy

Data controller

The data controller for docta.me is an Individual Entrepreneur registered in the Republic of Armenia (state registration number: 286.1553510). For any data-related inquiries, contact us at contact@svad.net.

What we collect

When you use docta.me, we may collect:

• Account information (email, name) when you register
• Profile data from social login providers (Google, Facebook, Telegram)
• Anonymous usage data to improve the service

Social login

When you sign in with a social provider, we receive:

• Google — email, name, profile picture
• Facebook — email, name, profile picture
• Telegram — name, username, profile picture

How we use your data

We use your data to provide and improve our services: authenticate your account, personalize your experience, and communicate important updates. We do not sell your data.

Legal basis for processing

We process your personal data based on the following legal grounds under GDPR:

• Consent (Art. 6(1)(a)) — for analytics cookies and marketing communications. You can withdraw consent at any time.
• Contract performance (Art. 6(1)(b)) — for account management, authentication, and providing our core services.
• Legitimate interest (Art. 6(1)(f)) — for essential cookies, security measures, and service improvement.

Third-party services

We share data with the following service providers who process it on our behalf:

• Google Analytics — website traffic analysis and advertising measurement (USA)
• Mixpanel — product analytics and user behavior analysis (EU data residency)
• Cloudflare — security, CDN, and performance analytics (global network)

International data transfers

Some of our service providers (Google, Cloudflare) are based in the United States. Data transfers to the US are covered by the EU-US Data Privacy Framework. We only use providers that offer adequate data protection safeguards in accordance with GDPR Article 46.

Cookies

We use the following cookies:

• ncc_c — stores your cookie consent preference (1 year, essential)
• _ga, _gid, _gat — Google Analytics, website usage statistics (up to 2 years, analytics)
• mp_* — Mixpanel, product analytics (1 year, analytics)
• __cf_bm, __cflb — Cloudflare, security and performance (up to 30 minutes, essential)

Analytics cookies are only set after you give consent. You can change your preference at any time via the "Cookie settings" link in the footer.

Data retention

Account data is retained for as long as your account is active. If you delete your account, all personal data is removed within 48 hours. Analytics data is stored in anonymized form and retained for up to 24 months. Cookie consent preferences are stored for 12 months.

Your rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — revoke consent at any time without affecting prior processing

You also have the right to lodge a complaint with a data protection supervisory authority. As we operate from Armenia serving users in the EU, you may contact the supervisory authority in your country of residence.