Privacy Policy

Last Updated: February 2026

This Privacy Policy describes how DocsToData ("we", "us", or "our") collects, uses, and protects your information when you use our document data extraction platform (the "Service").

1. Information We Collect

We collect the following types of information when you use the Service:

Account Information: Username, email address, and account name provided during registration.
Authentication Data: Encrypted credentials (passwords are hashed and never stored in plaintext), authentication tokens, and session data.
Document Data: Documents submitted for extraction processing and the structured data extracted from them. Documents are processed transiently and are not retained beyond the extraction workflow unless explicitly configured.
Extraction Configuration: Templates and field definitions created to configure document extraction.
Usage Data: Log data including IP addresses, browser type, pages visited, extraction counts, and timestamps of access for security and operational purposes.

2. How We Use Your Information

We use the information we collect to:

Authenticate your identity and manage access to protected resources.
Process documents according to your extraction templates and deliver structured results.
Track usage against granted entitlements and enforce quotas.
Detect and prevent unauthorized access or security threats.
Improve and maintain the Service.
Communicate with you about your account or changes to the Service.

3. Cookies and Tracking

The Service uses cookies essential for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use third-party tracking or advertising cookies.

4. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption of sensitive data at rest and in transit.
Secure hashing of authentication credentials.
Role-based access controls on all administrative functions.
Regular security audits and monitoring.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Account data may be deleted upon request, subject to any legal or operational retention requirements. Audit logs may be retained for security purposes even after account deletion.

6. Third-Party Services

The Service may use third-party AI and cloud providers to perform document extraction. Documents submitted for processing may be transmitted to these providers solely for the purpose of extraction. We do not sell or share your data with third parties for marketing purposes.

7. Your Rights

You have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your account and associated data.
Object to or restrict certain processing of your information.

To exercise these rights, please contact us through the channels listed below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

9. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Montana, United States, without regard to its conflict of law provisions.

10. Contact Us

If you have questions about this Privacy Policy, please contact us through our GitHub repository.