Privacy Policy
Last Updated: June 2026
End-to-End Encryption
Your documents are encrypted at rest and in transit
No Data Selling
We never sell your data to third parties
Your Data, Your Control
Export or delete your data anytime
Right to Deletion
Permanent deletion within 30 days on request
1. Information We Collect
Account Information
- Email address (required for account creation)
- Name (optional, for personalization)
- Password (securely hashed, never stored in plain text)
Documents You Upload
- Files you choose to upload (PDFs, images, documents)
- AI-extracted metadata (dates, amounts, names - for search and organization)
- Text embeddings (for semantic search - cannot be reversed to original text)
Usage Information
- Feature usage patterns (to improve the product)
- Error logs (to fix bugs)
- IP address and device info (for security)
2. How We Use Your Information
- To provide and improve our Service
- To process your documents using AI (metadata extraction, search)
- To send important notifications (reminders, expiry alerts)
- To respond to your support requests
- To detect and prevent fraud or abuse
We do NOT use your documents to train AI models. Your data stays yours.
3. Data Sharing
We do not sell your personal information. We only share data in these limited circumstances:
- Family members: Only with members you explicitly invite and approve
- Service providers: Cloud hosting (AWS), AI processing (OpenAI) - under strict data protection agreements
- Legal requirements: If required by law or valid legal process
4. Data Security
- AES-256 encryption for all stored documents
- TLS 1.3 encryption for all data in transit
- Two-factor authentication available
- Regular security audits and penetration testing
- SOC 2 Type II compliant infrastructure (AWS)
5. Your Rights
You have the right to:
- Access: Download all your data at any time
- Correct: Update your account information
- Delete: Permanently delete your account and all data
- Export: Download your data in standard formats (JSON, ZIP)
- Withdraw consent: Opt out of marketing communications
6. Data Retention
We retain your data as long as your account is active. Upon account deletion:
- Active data is deleted immediately
- Backups are purged within 30 days
- Anonymized usage statistics may be retained
7. Cookies
We use essential cookies only:
- Session cookies: To keep you logged in
- Preference cookies: To remember your settings
We do not use advertising or tracking cookies.
8. International Data Transfers
Your data may be processed in data centers located in India, United States, and other AWS regions. We ensure appropriate safeguards are in place through Standard Contractual Clauses and AWS's data protection commitments.
9. Children's Privacy
ConfiDoc Life is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date at the top indicates when this policy was last revised.
11. Contact Us
For privacy-related questions or to exercise your rights, contact us at: privacy@confidoc.life