Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.

• Account Information: Name, email address, company details
• Document Data: Documents you upload for processing
• Usage Data: How you interact with our service
• Technical Data: IP address, browser type, device information

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our document processing services
• Process and analyze your documents as requested
• Communicate with you about your account and our services
• Ensure security and prevent fraud
• Comply with legal obligations

3. Data Security

We protect your personal information and documents against unauthorized access, alteration, disclosure, or destruction. Today this includes:

• Encryption in transit: all traffic to our app and API uses TLS (HTTPS)
• Uploaded documents are stored in Amazon S3, which encrypts every stored file
• Tax ID numbers, and the access tokens for your QuickBooks and Google connections, are encrypted by our application before they are stored
• Each customer's data is kept separate from every other customer's, and role-based access controls limit what each user can see
• Our application, database and file storage run in Amazon Web Services (AWS) data centers in the United States. Document images and text are sent to Google (Gemini and Document AI) to read them, and application logs are kept in Google Cloud in the European Union

4. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To comply with legal requirements
• To protect our rights and safety
• With trusted service providers under strict confidentiality agreements

5. Data Retention

We keep your documents and records while your account is active. When you close your account, we delete them within 30 days. Billing records are kept as long as tax law requires.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your personal information
• Export your data
• Opt-out of certain communications

7. Compliance

We handle personal data in line with the GDPR and the CCPA, and you can exercise the rights above by contacting us. We do not currently hold third-party security certifications such as SOC 2 or ISO 27001. Our services are not designed for health information covered by HIPAA, so please do not upload it.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at sales [at] dodocs.ai.