Privacy Policy

1. Scope

This Privacy Policy describes how DocuCraft AI (“we”, “us”, “our”) handles information when you visit our website, create an account, or use our products and services (collectively, the “Service”).

2. Plan-Specific Data Handling

3. Data We Collect

Account & Contact. Name, email, password (hashed), organization, and preferences. For Pro billing, limited payment metadata from our processor (no full card details stored by us).

Product Usage. App interactions, feature usage, device/browser info, IP address, timestamps, approximate location derived from IP, crash logs.

Content. Documents you create or upload, prompts, comments, and metadata (e.g., titles, structure). You control what you store.

Support. Messages you send to support, feedback, and survey responses.

Optional Integrations. If you connect third-party services (e.g., cloud storage), we receive tokens/IDs necessary to enable the integration.

4. How We Use Data

• Provide and maintain the Service (auth, documents, collaboration, workflows).
• Process AI requests and return outputs you request.
• Improve reliability, safety, and performance; debug and prevent abuse.
• Communicate about updates, security, billing, and support.
• Comply with legal obligations and enforce our Terms.

5. Sharing & Transfers

We do not sell personal data. We share data with:

• Vendors/Processors who help deliver the Service (hosting, analytics, email, payment). They must follow confidentiality and security obligations.
• Legal/Compliance when required by law or to protect rights, safety, and integrity of the Service.
• Change of Control if we undergo a merger, acquisition, or asset sale; we’ll notify you where required.

6. Cookies & Analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and understand usage. You can control cookies via your browser settings. Disabling certain cookies may affect functionality.

7. Security

We apply reasonable organizational and technical safeguards (encryption in transit, access controls, backups). No system is perfectly secure. If you suspect unauthorized access, contact [email protected].

8. Retention

We retain personal data as long as needed to provide the Service and for legitimate business purposes (e.g., security, compliance), then delete or anonymize it. You can delete individual documents and request account deletion.

9. Your Rights

Subject to applicable law, you may request to access, correct, export, or delete your data, and object to or restrict certain processing. To submit a request, email [email protected] from the address associated with your account. We may ask for verification to protect your account.

10. Children’s Privacy

The Service is not directed to children under the minimum age required by law in your jurisdiction. If we learn that we collected data from an ineligible user, we will delete it.

11. BYO API & Model Providers

Free (BYO API). If you connect your own AI providers (e.g., OpenAI, Gemini), prompts and data you choose to send will be transmitted to those providers under their policies. You control and are responsible for those connections, including costs and data handling by the provider.

Pro & Custom (Hosted Models). We process prompts and outputs to generate results, operate rate limits, and detect abuse. We may store minimal logs/metadata for a limited period to troubleshoot issues and ensure fair use. We do not use your content to train third-party foundation models. Custom plans may specify stricter controls (e.g., region pinning, private endpoints) in the DPA/MSA.

12. International Transfers

We may process and store data in countries other than yours. Where required, we rely on appropriate safeguards (e.g., contractual clauses) for cross-border transfers.

13. Changes to this Policy

We may update this Policy as our Service evolves. Material changes will be announced with reasonable notice. Continued use after the effective date means you accept the new Policy.

14. Contact

For privacy questions or requests, contact:

• Privacy: [email protected]
• Security: [email protected]
• Abuse: [email protected]
• Billing: [email protected]
• Sales (Custom): [email protected]
• Support: [email protected]

---