1. Introduction
Doculet ("we", "our", or "us") is operated by Eram Labs. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Doculet mobile application, web application, and related services (collectively, the "Service"). By using Doculet, you agree to the practices described in this policy.
2. Information We Collect
2.1 Account Information
- Email address and display name (when you register)
- Google account information (if you sign in with Google)
- Password (stored as a secure hash, never in plain text)
- Profile preferences (language, timezone, country)
2.2 Documents & Content
- Documents you upload (PDFs, images, etc.)
- Document metadata extracted by our AI (names, dates, numbers, categories)
- OCR-extracted text content from your documents
- AI-generated summaries and categorizations
- Tags, notes, and custom metadata you add
2.3 Usage Information
- Search queries and search history
- Activity logs (uploads, views, shares, downloads)
- Device information and IP address
- Push notification tokens (for delivering notifications)
2.4 Payment Information
Payment processing is handled by Razorpay. We do not store your credit/debit card details. We only receive transaction IDs, payment status, and subscription information from Razorpay.
3. How We Use Your Information
- To provide, maintain, and improve the Doculet service
- To process and organize your documents using AI (categorization, metadata extraction, OCR)
- To enable search across your documents and metadata
- To detect duplicate documents in your collection
- To send expiry reminders and notifications you have configured
- To process payments and manage your subscription
- To send important service-related emails (password resets, security alerts, weekly digests)
- To provide customer support
- To detect and prevent fraud, abuse, or security threats
4. AI Processing
Doculet uses third-party AI providers (such as Google Gemini and OpenAI) to process your documents for categorization, metadata extraction, summarization, and OCR. When a document is processed:
- Document text and images may be sent to AI providers for analysis
- AI providers process data according to their own privacy policies and data processing agreements
- We do not use your documents to train AI models
- Extracted metadata is stored in our database for search and organization
5. Data Storage & Security
- Documents are stored in encrypted object storage (S3-compatible)
- Passwords are hashed using bcrypt with salt
- Authentication uses JWT tokens with short expiry and refresh rotation
- The app supports biometric lock and PIN protection
- All API communications use HTTPS/TLS encryption
- Database connections are encrypted
- We implement rate limiting to prevent abuse
6. Data Sharing
We do not sell your personal data. We may share information only in these cases:
- With your consent: When you share documents with other users or via share links
- Service providers: AI providers (for document processing), Razorpay (for payments), Resend (for emails), Firebase (for authentication and push notifications)
- Legal requirements: If required by law, court order, or government request
- Safety: To protect the rights, safety, or property of Doculet, our users, or the public
7. Data Retention
- Your account data is retained as long as your account is active
- Deleted documents are moved to trash and permanently deleted after 30 days
- Search history can be cleared by you at any time
- If you delete your account, all your data (documents, metadata, activity logs) will be permanently removed within 30 days
8. Your Rights
You have the right to:
- Access: View all personal data we hold about you
- Export: Download all your data in standard formats (ZIP, CSV, JSON) via the Export feature
- Correct: Update or modify your personal information
- Delete: Request permanent deletion of your account and all associated data
- Revoke consent: Revoke active sessions and disconnect third-party logins
9. Cookies & Local Storage
The Doculet web app uses local storage to store authentication tokens and user preferences. We do not use tracking cookies. No third-party advertising cookies are used.
10. Children's Privacy
Doculet is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
- Email: info@doculet.in
- Company: Eram Labs
- Website: https://doculet.in