General information, not legal advice. This text explains how the service works and what we do; it does not promise any legal outcome.
Data Processing Addendum
Version 2026-10-01
Who runs Docustay
Docustay is a product of GLRS LLC. In this document, “we”, “us” and “our” mean GLRS LLC. To reach us, use the Contact page.
Overview
This Data Processing Addendum applies whenever Docustay processes personal data on your (the organisation's) behalf, as described in our Privacy Policy, and forms part of your agreement with us when you accept it at signup. You are the controller of your clients' and leads' data; we are the processor, acting only on your documented instructions as set out below.
1. Processing on instructions
We process personal data only to provide Docustay to you and in accordance with your use of its features — we don't use your clients' data for our own purposes, and we don't sell it.
2. Confidentiality
Everyone with access to organisation data on our side is bound by confidentiality obligations, and access is limited to what's needed to provide and support the service.
3. Security
We maintain the technical and organisational measures described in our Privacy Policy's Security section — encryption, access controls, database-level tenant isolation, two-step sign-in and backups — appropriate to the sensitivity of the data involved.
4. Sub-processors
We use the sub-processors listed in our Privacy Policy. We'll give you reasonable notice (via email or in-product notice) before adding a new sub-processor that will handle your data, so you can raise an objection.
5. Assisting with rights requests and breaches
We'll help you respond to a data subject request from one of your clients (access, correction or deletion) using the tools in Docustay, or directly if asked. If we become aware of a security incident affecting your data, we'll notify you without undue delay so you can meet your own notification obligations.
6. Deletion or return at the end
When your account ends, you can export your data for 30 days, after which we delete it, as described in our Privacy Policy's Retention section.
Contact
Questions about this Addendum: privacy@docustay.app