Understand how your data is handled.

Data handling

Files are stored in Supabase Storage. Submitted forms create lead records, alongside recorded views and downloads. Database access rules scope organisation records to authorised accounts. Team folders organise work within your organisation; recipient links have their own access settings.

Encryption

Connections to GateDocs use HTTPS. Supabase provides encryption at rest for the database and file storage, and encryption in transit for its services.

Privacy and data controls

Choose which contact details your lead form asks for. You can delete individual leads and export available leads as a CSV, subject to your plan’s lead limits. Our Privacy Policy explains the information we collect and how to make a data request.

Data residency

Your files and the database are stored in Sydney, Australia, with Supabase. The app’s servers also run in Sydney, with Vercel, and pages reach you through Vercel’s global network.

A few services we use can handle data outside Australia:

• CloudConvert turns Word, Excel and PowerPoint files into a PDF preview, so it receives those files. PDFs and images aren’t sent.
• Resend delivers our emails, so it receives the addresses and the message.
• Stripe handles payments, so it receives billing details.

If your organisation needs every step to happen in Australia, contact us before uploading.

Deletion & export

Deleting a file moves it to Trash, where it can be restored or permanently deleted. Access through its share link stops when the file is deleted. You can also delete individual leads or export available lead records. For account-level data requests, use the contact details in our Privacy Policy.