iStoreDOCS app privacy policy
What the iStoreDOCS app for iPhone and Android collects, and what happens to it. Last updated 11 November 2026.
Who we are
The iStoreDOCS app (the "app") is made by MAD DEVS Ltd ("we", "us"), registered in England, company no. 11736413, registered address 20-22 Wenlock Road, London N1 7GU. Our information security management system is certified to ISO 27001. For anything in this policy, email support at istoredocs.co.uk.
This policy covers the app only. Our website privacy policy covers maddevs.co.uk and enquiries to us, and the app terms of service cover how the app may be used.
Who the app is for
The app is for sales and service staff at dealerships that subscribe to iStoreDOCS. You cannot sign up in the app: your dealership creates your account. The app is not intended for children.
Who is responsible for the data
Customer documents, signatures and video messages belong to your dealership. The dealership is the data controller for that information and we process it on its behalf, under our contract with the dealership. We are the controller for the small amount of data we need to run the app itself, such as crash reports.
What the app collects
Your account. Your name, work email address, dealership and the access your dealership has given you. The app keeps a sign-in token on your phone so you stay signed in.
Documents and signatures. The documents you scan or upload and the signatures you capture, attached to the customer's deal or job in iStoreDOCS. These can include identity documents such as driving licences, finance and sale paperwork, and the customer's name, address and contact details.
Video messages. Videos you choose to record in the app, with sound, for example to show a customer their vehicle. These are uploaded to the deal they belong to.
Camera, microphone and storage. The app uses your camera to scan documents and record video, and your microphone only to record the sound for a video message. It may ask for access to your phone's storage to save a scan or video before it uploads. It uses these only when you start a scan or recording.
Crash reports. If the app crashes or hits an error, it sends a report to Raygun, our crash reporting service. The report contains the error details, the app version, your phone model and operating system version, and may include your dealership and your user account details so we can follow up with you.
The app does not collect your location, contacts or advertising ID, and it does not read your photo library except for a file you choose to upload. It does not track you across other apps or websites, and it shows no adverts.
How we use it
We use this data to sign you in, store documents, signatures and videos against the right deal or job, and find and fix faults. We do not use it for marketing and we do not sell it.
Who we share it with
Documents, signatures and videos are visible to your dealership, in line with the access it has set up. We also use these service providers, who process data for us and only on our instructions:
- Amazon Web Services, which hosts iStoreDOCS and stores its data;
- Raygun, which receives crash reports.
We disclose data where the law requires it. If our business is sold or restructured, data may transfer to the new owner under the same protections.
Where it is stored
iStoreDOCS data is stored in the Amazon Web Services region for your dealership's country: London for the UK, Ireland for Ireland, Cape Town for South Africa and Sydney for Australia. Crash reports are handled by Raygun, which may process data outside your country under its own safeguards.
Security
All traffic between the app and our servers is encrypted with HTTPS. Access to data is limited to the people who need it, at your dealership and at MAD DEVS, and is governed by our ISO 27001 certified information security management system.
How long it is kept
We keep personal data only for as long as we need it for legal, regulatory and contractual obligations and legitimate business purposes, under our Data Protection Policy. Each dealership can also set its own retention periods in iStoreDOCS, and data that is no longer needed is securely deleted. Scans and videos are held on your phone only until they upload, and deleting the app removes its data from your phone.
Your rights and deleting your data
Your account belongs to your dealership's iStoreDOCS setup, so the quickest way to have it closed or your details removed is to ask your dealership's iStoreDOCS administrator. You can also email support at istoredocs.co.uk and we will work with your dealership to deal with it.
You can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. These rights come from the data protection law that applies to you: UK GDPR in the UK, the GDPR in Ireland, POPIA in South Africa and the Privacy Act 1988 in Australia. If you are a dealership's customer, please send requests about your data to the dealership.
If you are unhappy with how we have handled your data, you can complain to your data protection regulator. In the UK that is the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes, the new version will appear on this page with a new date. If the change is significant, we will tell your dealership before it takes effect.