Privacy Policy

1. Introduction

DocuLoom ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information You Provide

• Account information (name, email address, password)
• Content you upload or generate within the Service (transcripts, documents)
• Payment information (processed securely by Paddle — we never store card details)
• Communications you send us via email or the contact form

Information Collected Automatically

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, screen resolution)
• Usage data (features used, documents created, session duration)
• Cookies and similar tracking technologies (see Section 7)

Information from Third Parties

If you sign in using Google or GitHub OAuth, we receive basic profile information (name, email, profile picture) from those providers in accordance with their own privacy policies.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Send transactional emails (account confirmation, password resets, receipts)
• Respond to your support requests and inquiries
• Analyze usage patterns to improve the Service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your content to train AI models.

4. How We Share Your Information

We may share your information with:

• Supabase — for authentication and database storage
• Paddle — for payment processing and subscription management
• AI providers — content you submit for document generation is processed by our AI provider solely for that purpose
• Law enforcement — when required by law or to protect our legal rights

All third-party service providers are contractually obligated to handle your data securely and only for the purposes we specify.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Documents and content you delete from the Service are removed from our active systems immediately, though they may persist in backups for up to 30 days.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings, though disabling certain cookies may affect Service functionality.

8. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — request a machine-readable export of your data
• Objection — object to certain types of processing

To exercise any of these rights, contact us at contactdoculoom@gmail.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers are subject to appropriate safeguards in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at contactdoculoom@gmail.com or through our Contact page.