The short version
- We only use your documents to give you the results you asked for. We don't sell them or use them to train AI models.
- Documents are deleted automatically after the period you choose: 1, 7, 30, 90 days (depending on your plan). You can delete everything at any time.
- When you ask a question or extract fields, the extracted text (and sometimes page images) is sent to Google's Gemini API to produce the answer.
- Payments are handled by Razorpay. We never see or store your card or UPI details.
- You can download all your data or delete your account from Account → Privacy & data.
1. Who we are
DocuneX is operated by [Company legal name], [Registered address] ("we", "us"). We are the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
2. What we collect
- Account details: your email address, name, and a one-way hash of your password (or your Google account ID if you sign in with Google).
- Documents and results: the extracted text, structure, page previews and any template fields for each document you process, kept only until your retention period ends. Original files are not stored after processing.
- Usage: pages processed, questions asked and API calls per month, to apply plan limits.
- Product events: a record of actions such as sign-up, document processed or payment completed, stored in our own database to understand how DocuneX is used. We don't use third-party advertising trackers.
- Payments: the plan, amount, date and Razorpay order and payment IDs.
- Support messages: what you send us through the support form.
3. Who processes your documents
| Service | What it receives | Why |
|---|---|---|
| Your browser | The file itself | Digital PDFs and Tesseract OCR run on your own device. |
| DocuneX servers | Images and scanned pages | PaddleOCR text recognition, and storing results for your history. |
| Google Gemini API | Extracted text and some page images | Answering questions, extracting template fields and finding products, only when you use those features. |
| SerpApi (Google Shopping) | Product names you ask prices for | Showing prices and stores. |
| Razorpay | Your payment details | Processing payments. |
| Google sign-in (optional) | Your Google email and name | Signing you in, if you choose it. |
Check each provider's own terms for how they handle data, including Google's Gemini API terms on whether inputs may be used to improve its services on the tier you configure.
4. How long we keep it
Documents and their results are deleted automatically when your chosen retention period ends (checked every hour). Account details, usage and payment records are kept while your account exists; payment records may be kept longer where tax law requires. Deleting your account removes your documents, sessions, API keys and usage immediately.
5. Cookies and local storage
We use one essential cookie to keep you signed in (dx_session, httpOnly, 30 days). Your light/dark theme choice is saved in your browser's local storage. We don't use advertising cookies.
6. Your rights
Under the DPDP Act you can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. Most of this is self-service: download your data, edit your profile or delete your account. For anything else, contact our grievance officer: [Grievance officer name], [privacy@your-domain]. We respond within 30 days. If you're not satisfied, you may complain to the Data Protection Board of India.
7. Security
Passwords are stored as salted scrypt hashes; API keys and session tokens are stored only as hashes. Connections should always use HTTPS. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the Data Protection Board as the law requires.
8. Health and financial documents
Prescriptions, bank statements and invoices can contain sensitive information. Upload only documents you are entitled to share, choose the shortest retention period that works for you, and avoid uploading other people's documents without their consent.
9. Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.