Privacy Policy
Last updated: February 12, 2026
1. Introduction
Docurest ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered document search and chat platform (the "Service").
By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Username
- Password (encrypted)
- Organization name (if applicable)
- Billing information (processed by our authorized payment processor)
2.2 Uploaded Documents
When you use our Service, you may upload documents including PDFs, Word documents, text files, and other supported formats. We process these documents to provide you with AI-powered search and chat capabilities.
2.3 Usage Information
We automatically collect certain information when you use the Service:
- Log data (IP address, browser type, pages visited, time spent)
- Device information (device type, operating system)
- Chat queries and interactions with the AI
- Feature usage patterns
2.4 Information from Third Parties
If you connect third-party services (such as Google Drive), we may receive information from those services as authorized by you. We only access information necessary to provide the requested functionality.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process and index your documents for AI-powered search
- Generate AI responses to your queries
- Process payments and manage subscriptions
- Send service-related communications
- Respond to customer support requests
- Monitor and analyze usage trends
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Document Processing and AI
Your documents remain your property. We process your uploaded documents solely to provide you with the Service. This includes:
- Extracting and indexing text content
- Creating vector embeddings for semantic search
- Generating AI responses based on your document content
Important Commitments:
- We do not sell your data. Your documents and personal information are never sold to third parties.
- We do not use your documents to train public AI models. Your content is used exclusively to provide the Service to you.
- Your documents are processed in isolated environments and are not shared with other users.
5. Data Sharing and Disclosure
We may share your information in the following circumstances:
5.1 Service Providers
We work with third-party service providers who assist in operating our Service, including:
- Cloud hosting providers (e.g., Hetzner)
- Our authorized payment processor — acting as our Merchant of Record. Our payment processor collects your billing information, IP address, and device data for payment processing and fraud prevention. The payment processor is an independent data controller for payment-related data.
- AI service providers (for document processing and embeddings)
- Email service providers (for transactional emails)
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.2 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you with the Service. Specifically:
- Account information: Retained while your account is active and for a reasonable period thereafter for legal and business purposes.
- Uploaded documents: Retained until you delete them or close your account.
- Chat history: Retained while your account is active. You may delete chat history at any time.
- Usage logs: Generally retained for up to 12 months.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
7.1 Access
You have the right to request access to the personal information we hold about you.
7.2 Rectification
You have the right to request correction of inaccurate personal information.
7.3 Erasure
You have the right to request deletion of your personal information, subject to certain legal exceptions.
7.4 Data Portability
You have the right to receive your personal data in a structured, commonly used format.
7.5 Withdrawal of Consent
Where we process data based on consent, you may withdraw that consent at any time.
7.6 Exercising Your Rights
To exercise any of these rights, please contact us at support@docurest.com. We will respond to your request within 30 days.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
When we transfer personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Transfers to countries with adequacy decisions
- Other legally approved transfer mechanisms
10. Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Secure data centers with physical security measures
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
11. Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as via email). Your continued use of the Service after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Docurest
All inquiries (privacy, data protection, GDPR, etc.):
support@docurest.com