1. Who we are
DocFound ("we", "us", "our") is a document management service. When you use DocFound, you trust us with your documents and personal data. This policy explains what we collect, how we use it, and your rights.
2. What we collect
- Account information: Your name and email address when you register, or the equivalent profile information from a third-party authentication provider (such as Google, GitHub, Microsoft or others) if you choose to sign in using those services.
- Documents you upload: Files you upload are stored and processed to provide the service. This includes extracting text, generating smart descriptions, and detecting entities within the document content.
- Usage data: Basic server logs including IP addresses, browser type, and pages visited. We also use cookies and similar tracking technologies to analyze site traffic and ad performance.
3. How we use your data
- To operate DocFound and provide the features you use (document storage, search, automated analysis).
- To send transactional emails such as team invitations and password resets.
- To diagnose technical problems and improve the service.
- To measure the effectiveness of our marketing and provide relevant advertising through third-party services.
- We do not sell your personal documents or their contents to any third parties.
4. Automated processing of your documents
Document text is processed automatically to generate descriptions and extract entities. This automated analysis is performed by third-party LLM systems. By uploading documents, you consent to this processing. This does not involve "automated decision-making" with legal effects. We recommend not uploading documents containing highly sensitive information such as passwords, secret keys, or confidential personal data beyond what is necessary for your use of the service.
5. Data sharing
We share data with the following categories of service providers to operate DocFound:
- Cloud infrastructure: File storage and database hosting.
- LLM Processing Providers: Third-party LLM service providers used for document analysis, entity extraction, and summarization.
- Authentication Providers: We share necessary identifiers with third-party authentication services (such as Google, GitHub, Microsoft, or others) only when you choose to use them to sign in to DocFound.
- Analytics & Advertising: Google Analytics and Google Ads to track site usage and campaign performance.
- Consent Management: A Consent Management Platform (CMP) to record and respect your tracking preferences.
6. Cookies and Consent We use cookies to maintain your session and for security.
We also use third-party cookies for analytics and advertising. Our website utilizes Google Consent Mode v2 to ensure your data is only processed by Google services based on the specific consent signals you provide. You can manage or withdraw your consent at any time via the cookie settings banner on our website.
7. Team accounts
If you are part of a team workspace, documents you upload are visible to all members and owners of that workspace. The team owner controls membership. If you leave a team workspace, your uploaded documents may remain visible to the team.
8. Data retention
We retain your account data and documents for as long as your account is active. When you delete a document, it is removed from our systems. You can request deletion of your account and all associated data by contacting us.
9. Security
We use industry-standard security practices including encrypted connections (HTTPS) and access controls. No system is completely secure, and we cannot guarantee absolute security of your data.
10. GDPR — rights of EU/EEA residents
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our lawful basis for processing your personal data is the performance of the contract between you and DocFound (i.e., providing the Service). Where you have given consent (for example, for automated document processing or marketing cookies), you may withdraw it at any time.
Under GDPR you have the right to: Access, Rectification, Erasure, Restriction, Portability, and Objection. To exercise these rights, email us at
[email protected].
11. Your rights (all users) Regardless of your location, you may request access to, correction of, or deletion of your personal data at any time by emailing
[email protected].
12. Changes to this policy
We may update this policy from time to time. We will post the updated policy on this page with a revised "last updated" date.
13. Contact For privacy-related questions or data requests, email us at
[email protected].