Privacy

Last update: October 1, 2026

Short version

We collect what we need to run the desk: your account, your files, your chat, and payment status. We do not sell that data. Card numbers go to Stripe, not to us.

What we collect

If you create an account we store your email and a hashed password. If you upload documents we store the files, names, folder names, marks, and chat so you can come back. If you pay, Stripe tells us whether the subscription is active, the plan, seat count, and a customer id. We do not store full card numbers or CVC codes.

You can use the desk without an account. Files a guest adds stay in this browser. To count a guest's free AI requests we keep a random id for the browser and the number of requests from its network (IP address), never the files or what was asked.

How we use it

We use this data to show your desk, compare documents, answer questions, bill you, and keep the service safe. When you ask the chat to read or mark a file, we send the needed pages and your question to our AI provider so it can reply.

Who else sees it

We use a few companies to run the product:

• Stripe, for checkout and subscriptions.
• Supabase, for login and saved files when you have an account.
• OpenAI, to read documents and answer chat.
• Vercel, to host the site and count page visits without advertising cookies.
• Meta, to measure which ads lead to a new account.

We share data with them only to provide the service. We do not sell personal data. We may share information if the law requires it.

Payments

Payments run on Stripe. Stripe is a PCI certified payment processor. Checkout uses HTTPS. We never see your full card number on our servers.

Cookies

We use cookies and local storage to keep you signed in and to remember the desk on this device. Guests get a cookie with a random id that counts their free AI requests. The Meta pixel also sets a cookie so we can see which ads lead to a new account.

How long we keep it

Account data and saved files stay while the account is open. Deleted files and folders wait in Trash for 30 days, then they are removed for good (you can also remove them sooner from Trash). You can delete your account in Settings; files in team folders stay with your team. You can also write to hello@docugaps.com. Billing records may stay as long as tax and payment rules require.

Your choices

You can access, correct, or ask us to delete your account data by emailing hello@docugaps.com. If you are in a place with extra privacy rights, we will honor those requests the law requires.

Contact

Privacy questions: hello@docugaps.com. Also see the Terms.