Platform
Solutions
Developers
Resources
Pricing
About
Log in
Payload Logo

Platform

Solutions

Developers

Resources

Pricing

About

Log in
Doctavian

Platform

OverviewFeaturesIntegrationsTrust & SecurityApps & ExtensionsRelease Notes

Solutions

By IndustryBy DepartmentBy Use Case

Developers

OverviewGet StartedDocument GenerationDigital SignaturesAPI ReferenceAPI Release Notes

About

About UsContact UsCertificatesTerms & ConditionsPrivacy PolicyDigital Signature Disclosure

Pricing

View Plans

Resources

InsightsEvents

© 2026 Doctavian™ & Maven Mule™

Privacy Policy

Doctavian Privacy Policy


1. INTRODUCTION

When using Doctavian, a product by Maven Mule ("we," "us," or "our"), you trust us with your Personal Information. We take your privacy very seriously, and we strive to do our best to protect it. In this Privacy Policy, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. This Privacy Policy applies to your use of the Doctavian marketing website (https://www.doctavian.com), the Doctavian platform/portal (https://portal.doctavian.com), and related services (collectively, the "Services"). Please read this Privacy Policy carefully, as it will help you make informed decisions about sharing your Personal Information with us. You are under no obligation to provide us with any Personal Information; however, your refusal to do so may prevent you from using certain core features of Doctavian.


2. WHO WE ARE AND THE SCOPE OF THIS POLICY (CONTROLLER VS. PROCESSOR)

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), the data controller responsible for your personal data is:

  • Company Name: Maven Mule Ltd
  • Address: Borovci 15, Zagreb 10000, Croatia
  • Contact Email: security@mavenmule.com

Important Distinction: This Privacy Policy applies to the information we collect to manage your account, operate our website, and provide the Doctavian platform (where Maven Mule acts as a Data Controller). However, this Policy does not apply to the content of the contracts, documents, or templates you upload, process, or manage through Doctavian ("Customer Content"). For Customer Content, you are the Data Controller, and Maven Mule acts strictly as a Data Processor. The processing of Customer Content is governed exclusively by our separate Data Processing Agreement (DPA) and our Terms & Conditions (T&C).

Notice to End Users (Enterprise Accounts): If you use Doctavian through an account provided by your employer or organization, that organization is the administrator of the account and has control over it. Your administrator may be able to access, disclose, restrict, or remove information in or from your account, and may dictate your ability to access the Services. In such cases, your use of the platform is subject to your organization's internal policies, and you should direct your privacy inquiries related to Customer Content to your administrator.


3. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?

We may collect information about you in various ways, depending on whether you are simply visiting our public website or using our registered portal.

A. Information Collected via the Doctavian Website When you visit, use, or navigate through our public website:

  • Information You Provide: Data collected when you fill out forms, such as our free trial form or Product Order Form. This includes your full name, business email address, company name, job title, and phone number.
  • Automatically Collected Information: Technical data needed to maintain website security, operate the site, and perform internal analytics. This includes your IP address, browser User-Agent data, date and time of access, Clickwrap agreement logs (exact text of agreement and timestamp), Google Analytics data, and Google reCAPTCHA verification data.

B. Information Collected via the Doctavian Portal (App) When you register for, log into, and use the Doctavian software application:

  • Account & Profile Data: Identifiable information required to create and manage your user account. This includes your full name, email address, company details, and Tenant ID.
  • Billing & Financial Data: If you purchase Doctavian directly from us or via the Salesforce AppExchange, Maven Mule issues the invoice directly and collects necessary billing details. If you purchase Doctavian through transactable marketplaces like Microsoft AppSource or Google Cloud Marketplace, your billing and payment information is collected and processed directly by Microsoft or Google, respectively. We do not collect or process your credit card data on our servers.
  • Usage & Telemetry Data: Technical logs generated during your use of the platform to ensure security and optimize performance. This includes your IP address, browser User-Agent data, timestamps of actions, and Clickwrap acceptance logs.
  • Information from Third Parties: If you register via third-party marketplaces (e.g., Microsoft or Google), we receive essential account setup data from them, specifically your email address, full name, and Tenant ID. Maven Mule does not seek to collect or process "sensitive" or "special categories" of personal information (such as religious beliefs, health data, etc.) unless strictly required by law or explicitly provided by you with consent.


4. HOW DO WE USE YOUR INFORMATION AND LEGAL BASIS?

We process your Personal Data for specific purposes and rely on valid legal bases under applicable data protection laws, particularly if you are located in the European Economic Area (EEA) or the UK.


A. Doctavian Website & Marketing

Purpose of Processing Legal Basis Description


Responding to inquiries Legitimate interest To communicate with you based on your requests viacontact forms or email.


Scheduling meetings Contractual necessity To process meeting requests via /Legitimate interest. scheduling tools.


Marketing & Newsletters Consent To send promotional materials (only with your explicit opt-in).

Website analytics & Consent To analyze interactions and optimization improve website performance using analytics tools.


B. Doctavian Portal & Application

Account creation & service Legal Basis Description delivery Platform security & Contractual necessity To create your user account, troubleshooting provide access to the Doctavian portal, and deliver our core services.


Scheduling meetings Legitimate interest. To monitor logs, prevent fraud, and ensure the secure operation of the SaaS platform.



Marketing & Newsletters Legal obligation / To process payments, issue Contractual necessity invoices, and notify you of important policy changes.



Artificial Intelligence (AI) and Machine Learning: We do not use your Customer Content, Personal Information, or system telemetry data to train any internal or public artificial intelligence (AI) models. For users worldwide, your continued use of our Services constitutes your acknowledgment and agreement to our processing of data as described in this Policy.


5. WHO WILL YOUR INFORMATION BE SHARED WITH?

Even though we do not generally share your Personal Information outside Maven Mule, there are specific situations where sharing is necessary for business or legal reasons. Before transferring your data, we ensure it is protected in accordance with applicable law. We may share your data with:

  • Third-Party Service Providers: Agents, contractors, or vendors that assist us in providing our Services. Key sub-processors include Microsoft Azure and Google Cloud for portal and database hosting (primarily in the EU), Vercel for website hosting, Jira Service Desk for customer support, Lemlist, Salesforce, and LinkedIn for marketing/CRM, and Google for analytics, communication, and reCAPTCHA security.
  • Third-Party Integrations and Platforms: If you choose to connect Doctavian with third-party platforms (e.g., Salesforce, Microsoft), your data may be shared with or accessed by these platforms to enable interoperability. We do not control how these third parties process your data.
  • Corporate Transactions: If Maven Mule is involved in a merger, acquisition, or reorganization, your data may be included in the transferred assets.
  • Legal & Regulatory Authorities: When we are legally or professionally obligated to disclose information to comply with a court order or applicable law.


6. INTERNATIONAL DATA TRANSFER

As some of our third-party service providers and partners operate globally, some of your Personal Information may be transferred to and processed in countries outside of the country where you reside, including outside the European Economic Area (EEA). Whether we transfer your data inside or outside the EEA, we will ensure that your privacy rights continue to be protected using appropriate safeguards, such as adequacy decisions or the European Commission’s Standard Contractual Clauses.


7. COOKIES AND TRACKING TECHNOLOGIES

We and our third-party service providers use cookies, web beacons, and similar tracking technologies to collect information about your activities on our website and portal. We use these technologies to ensure core platform functionality, remember your preferences, and analyze user behavior to improve our Services. You can control or disable non-essential cookies through your browser settings or our cookie consent banner. Please note that disabling essential cookies may impact your ability to use the Doctavian platform.

Google reCAPTCHA: We use Google reCAPTCHA on our website to protect against spam, fraud, and abuse. To determine whether a user is a human or a bot, reCAPTCHA collects hardware and software information, such as device and application data, browser information, and your IP address, and sends it to Google for analysis. The use of reCAPTCHA is subject to Google's Privacy Policy(https://policies.google.com/privacy) and Terms of Service(https://policies.google.com/terms).


8. HOW DO WE PROTECT YOUR INFORMATION?

We put the utmost effort into protecting both Maven Mule and you against unauthorized access, accidental loss, alteration, or unlawful destruction of personal information. Doctavian is developed, hosted, and maintained under Maven Mule’s comprehensive organizational security framework. Our commitment to data security and operational excellence is demonstrated through our company's alignment with, and certification in, the following standards:

  • ISO 27001 (Information Security Management System)
  • SOC 2 Type II attestation
  • Cyber Essentials (CE) and Cyber Essentials Plus (CE+) certifications
  • Additional ISO Standards: Comprehensive frameworks covering quality management, business continuity, IT service management, and environmental standards (ISO 9001, 22301, 20000, 14001, and 50001)
  • HIPAA and CMMC compliance processes (in progress)

We have implemented appropriate technical and organizational security measures, including firewalls, encryption (in transit and at rest), and strict access controls. However, please note that no transmission over the internet is 100% secure. Although we will do our best to protect your data, transmission is at your own risk.


9. DATA RETENTION

We will only retain your Personal Information for as long as it is necessary to fulfill the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax or accounting purposes). When we have no ongoing legitimate business need to process your data, we will either securely delete or anonymize it.


10. YOUR PRIVACY RIGHTS (EEA/UK & GENERAL)

We believe that privacy is a fundamental right. Therefore, regardless of where you are located, we provide all our users with the ability to exercise the following rights regarding their Personal Data:

  • Request access to the Personal Data we hold about you.
  • Request rectification of inaccurate data.
  • Request erasure of your data (the "right to be forgotten").
  • Restrict or object to our processing of your data.
  • Data portability (to receive a copy of your data in a machine-readable format).
  • Withdraw consent at any time (which does not affect the lawfulness of processing before withdrawal)

Also, you may choose to stop receiving marketing or promotional emails from us at any time by clicking the “Unsubscribe” link at the bottom of our emails or by updating your communication preferences in your Doctavian account settings. Please note that even if you opt out of marketing messages, we will continue to send you essential transactional and administrative messages regarding your account and the Services.


To exercise your rights, you may contact us at security@mavenmule.com by sending your request using the GDPR Rights Request template available on the Doctavian website. We will typically acknowledge requests within 7 (seven) calendar days and will respond substantively within 30 (thirty) days unless a legal extension is permitted based on the complexity of your request.

Additional Rights for EEA/UK Residents: If you reside in the European Economic Area (EEA) or the UK and believe we are unlawfully processing your data, you also have the right to lodge a complaint with your local data protection supervisory authority.


11. ADDITIONAL DISCLOSURES FOR U.S. RESIDENTS

While the core rights to access, correct, and delete your data apply globally (as outlined in Section 10), if you are a resident of certain U.S. states, including California, you have the following additional rights specific to local privacy laws:

  • Right to Opt-Out of Sale or Sharing: We do not sell your personal information. Furthermore, we do not share your personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you (e.g., by denying services or changing prices) for exercising your privacy rights.

To exercise these rights, or if you have specific questions about our compliance with U.S. state privacy laws, please contact us at security@mavenmule.com.


12. DATA BREACH AND DO-NOT-TRACK (DNT) FEATURES

  • Data Breach: In the unlikely event of a personal data breach that may result in a risk to your rights and freedoms, we will promptly investigate the incident. If required by law, we will notify the affected individuals and the relevant supervisory authority (e.g., the Croatian Personal Data Protection Agency - AZOP) (https://azop.hr/) within 72 hours of becoming aware of the breach. We will also take immediate and appropriate remedial actions to mitigate any potential harm.
  • DNT Signals: We do not currently respond to Do-Not-Track (DNT) browser signals.


13. CHILDREN’S PRIVACY

Our Services are not designed for or targeted at children under the age of 16. We do not intentionally collect data from minors. If you believe we have unintentionally collected such data, please contact us so we can promptly delete it.


14. CHANGES TO THIS POLICY & CONTACT INFO

We may update or amend this Privacy Policy from time to time. The updated version will be indicated by a new "Last Updated" date. If you have any questions or comments about this Policy, please contact us at security@mavenmule.com or by post to: Maven Mule Ltd, Borovci 15, Zagreb 10000, Croatia.

Last updated: August 13th, 2026

  • Doctavian Privacy Policy
  • 1. INTRODUCTION
  • 2. WHO WE ARE AND THE SCOPE OF THIS POLICY (CONTROLLER VS. PROCESSOR)
  • 3. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?
  • 4. HOW DO WE USE YOUR INFORMATION AND LEGAL BASIS?
  • 5. WHO WILL YOUR INFORMATION BE SHARED WITH?
  • 6. INTERNATIONAL DATA TRANSFER
  • 7. COOKIES AND TRACKING TECHNOLOGIES
  • 8. HOW DO WE PROTECT YOUR INFORMATION?
  • 9. DATA RETENTION
  • 10. YOUR PRIVACY RIGHTS (EEA/UK & GENERAL)
  • 11. ADDITIONAL DISCLOSURES FOR U.S. RESIDENTS
  • 12. DATA BREACH AND DO-NOT-TRACK (DNT) FEATURES
  • 13. CHILDREN’S PRIVACY
  • 14. CHANGES TO THIS POLICY & CONTACT INFO