WizDoxBack to home

WIZDOX PRIVACY POLICY

Effective Date: August 18, 2026

Last Updated: August 18, 2026

1. WHO WE ARE

WizDox is a trading name operated by Daniel Barna, sole trader established in Portugal, NIF 305655981, with address at R. Pedro Nunes 6, Oeiras, Portugal ("WizDox", "we", "us", or "the Operator").

WizDox operates the website wizdox.com (the "Platform") and Daniel Barna is the data controller responsible for your personal information.

Contact for data protection matters: privacy@wizdox.com

2. WHAT WIZDOX DOES — AND WHAT IT DOES NOT DO

WizDox is a document preparation service. We help individuals and businesses prepare applications for U.S. vital records (birth certificates, death certificates, marriage certificates, divorce records) and apostille requests by generating pre-filled application forms and providing tailored mailing instructions.

WizDox does NOT:

  • Submit applications on your behalf to any government office
  • Guarantee that any government authority will process, approve, or issue a record
  • Provide legal advice or act as a legal representative
  • Store your uploaded vital record images after they have been processed

3. WHAT PERSONAL DATA WE COLLECT

3.1 Account Information

  • Full name
  • Email address
  • Password (stored in encrypted, hashed form — never in plain text)
  • Phone number
  • Date of birth
  • Mailing address

3.2 Order & Application Data

Information you provide to complete an application form, which may include:

  • Names, dates of birth, and places of birth of individuals named on the records being requested
  • Names of parents or spouses as they appear on the record
  • State and county of the event
  • Reason for the request

3.3 Uploaded Images

When you upload a copy of a vital record or photo ID to enable auto-extraction of information, that image is processed in memory to extract the relevant data fields. Uploaded images are NOT stored on our servers. They are discarded immediately after processing and are never retained, shared, or used for any other purpose.

3.4 Generated Documents

The pre-filled application form (PDF) produced for your order is stored in your account for 90 days from the date of generation. After 90 days, it is permanently and automatically deleted. You are responsible for downloading your document before this period expires.

3.5 Payment Information

Payment is processed by Stripe, Inc., a third-party payment processor. WizDox does not store, transmit, or have access to your full credit or debit card details. Stripe processes payments under its own privacy policy available at stripe.com/privacy. We retain a record of the transaction amount, date, and Stripe transaction reference for accounting and legal compliance purposes.

3.6 Technical & Usage Data

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on the Platform
  • Referring URLs
  • Session identifiers and cookies (see Section 9)

4. HOW WE USE YOUR PERSONAL DATA

We process your personal data for the following purposes and on the following legal bases under the EU General Data Protection Regulation (GDPR):

Purpose | Legal Basis

Creating and managing your account | Performance of contract (Art. 6(1)(b))

Generating pre-filled application forms | Performance of contract (Art. 6(1)(b))

Processing payments | Performance of contract (Art. 6(1)(b))

Sending order confirmations and status updates | Performance of contract (Art. 6(1)(b))

Retaining transaction records for tax and accounting | Legal obligation (Art. 6(1)(c))

Preventing fraud, abuse, and unauthorized access | Legitimate interests (Art. 6(1)(f))

Improving the Platform and user experience | Legitimate interests (Art. 6(1)(f))

Sending service-related communications | Performance of contract / Legitimate interests

Sending marketing communications (if opted in) | Consent (Art. 6(1)(a))

Complying with legal requests from authorities | Legal obligation (Art. 6(1)(c))

5. HOW LONG WE KEEP YOUR DATA

Data Type | Retention Period

Account information | Until you delete your account

Order and application data | Until you delete your account

Generated PDF forms | 90 days from date of generation, then permanently deleted

Uploaded images | Not stored — discarded immediately after processing

Payment transaction records | 7 years (legal/tax compliance requirement under Portuguese law)

Technical/usage logs | 12 months

When you delete your account, all personally identifiable information is permanently removed from our systems within 30 days, except for records we are required to retain under applicable law (e.g., financial records).

6. WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We do not share your data with third parties for their marketing purposes. We may share data with:

  • Stripe, Inc. — for payment processing
  • Cloud hosting providers — for secure storage and delivery of the Platform (servers located in the EU or under appropriate data transfer safeguards)
  • Analytics providers — anonymized or aggregated usage data only
  • Law enforcement or regulatory bodies — only when required by law or to protect the rights and safety of WizDox or others

All third-party processors we engage are bound by data processing agreements that require them to protect your data in accordance with GDPR standards.

7. INTERNATIONAL DATA TRANSFERS

WizDox is incorporated in Portugal (EU). Your personal data is processed within the European Economic Area (EEA). To the extent any service providers are located outside the EEA (for example, Stripe is a US company), such transfers are conducted under the European Commission's Standard Contractual Clauses (SCCs) or other appropriate safeguards in accordance with GDPR Chapter V.

8. YOUR RIGHTS UNDER GDPR

As a data subject, you have the following rights:

  • Right of access — to obtain a copy of the personal data we hold about you
  • Right to rectification — to correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten") — to request deletion of your data, subject to legal retention obligations
  • Right to restriction — to limit how we process your data in certain circumstances
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@wizdox.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection supervisory authority:

CNPD — Comissao Nacional de Protecao de Dados

Rua de Sao Bento, 148-3, 1200-821 Lisboa, Portugal

www.cnpd.pt

9. COOKIES

We use cookies and similar tracking technologies to operate the Platform. A cookie is a small text file stored on your device.

Cookie Type | Purpose | Required?

Essential cookies | Platform functionality, authentication, session management | Yes — cannot be disabled

Analytics cookies | Understanding how users interact with the Platform (anonymized) | Optional — requires consent

Marketing cookies | Personalized advertising | Optional — requires consent

You can manage your cookie preferences through our cookie banner or your browser settings. Note that disabling essential cookies may affect Platform functionality.

10. CALIFORNIA RESIDENTS — YOUR CCPA RIGHTS

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — what personal information we collect, use, disclose, or sell
  • Right to Delete — personal information we have collected about you
  • Right to Opt-Out of Sale — WizDox does NOT sell personal information
  • Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To exercise these rights, email privacy@wizdox.com with the subject line "CCPA Request." We will respond within 45 days.

11. CHILDREN'S PRIVACY

WizDox is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us immediately at privacy@wizdox.com and we will delete the data promptly.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

CONTACT

WizDox (operated by Daniel Barna, sole trader)

NIF 305655981

R. Pedro Nunes 6, Oeiras, Portugal

Email: privacy@wizdox.com

Website: wizdox.com