Privacy policy

The service is operated by Docubox [legal entity name, registered address, and contact details to be completed by owner]. You can reach us at support@docubox.io.

• Your files. The bytes of files you upload, the results we produce from them, previews, and the filenames and technical metadata (type, size, page count) needed to process and display them.
• Account data. Your email address and the identifiers returned by your sign-in method (Google account identifier or the email used for a one-time code). We do not store a password.
• Usage events. Pseudonymous records of steps taken in the product (for example: upload started, conversion succeeded, file saved), the tool used, and coarse technical context. These do not include file contents, filenames, or email addresses.
• Payment references. When billing is enabled, a Stripe customer identifier, subscription status, and invoice references. Card details are entered on Stripe’s pages and never reach our servers.
• Support messages. What you send us when you ask for help, including any files you choose to attach.

• To perform the conversion or other operation you requested and show you the result.
• To let you sign in, keep documents you explicitly save, and manage or delete them.
• To enforce plan limits, prevent abuse, and keep the service working.
• To understand which steps of the product people complete or abandon, using pseudonymous events.
• To bill subscriptions and keep required financial records, when billing is enabled.
• To respond to support and security reports.

Legal bases [to be completed by owner for the applicable jurisdictions, e.g. contract, legitimate interests, consent].

• We do not sell your data.
• We do not use your documents to train AI models, ours or anyone else’s.
• We do not read your documents except as needed to perform the operation you asked for, investigate a problem you report, or respond to a legal obligation.
• We do not show advertising.

We rely on the following providers to run the service. Each acts on our instructions.

• Supabase — authentication and database hosting.
• Cloudflare — private object storage for files and message queues for processing jobs.
• Vercel — hosting for the web application.
• Amazon Web Services — processing compute for conversions in production.
• Stripe — subscription billing and payment processing, when billing is enabled.
• Resend — transactional email such as sign-in codes and notices, when enabled.
• Google — sign-in with Google, if you choose that method.

Error reports sent to our monitoring are scrubbed of file contents, filenames, and email addresses. [Confirm the monitoring provider and data processing terms before publication].

Unsaved conversion results expire 24 hours after the upload session starts. Saved documents stay until you delete them; trash keeps them for 7 days. Job diagnostics and raw usage events are kept for 30 days.

The full table, including what does and does not extend expiry, is on the file retention page. Account data is kept while your account exists. Billing records may be retained longer where required by law [period to be completed by owner].

• Access and export. You can download any saved document at any time and request an export of your account data from your privacy settings.
• Deletion. You can delete individual documents, empty the trash, and delete your whole account. Account deletion removes your files, derived previews, and account record, subject to the billing record retention above.
• Correction. You can change your profile details in settings.

Depending on where you live you may have further rights, including the right to complain to a supervisory authority [jurisdiction-specific rights and authority to be completed by owner]. To exercise any right, use the controls in your account or email us.

We use cookies that are strictly necessary to keep you signed in and to associate an anonymous conversion with your browser session. We do not use third-party advertising cookies. [Confirm whether an analytics cookie or consent mechanism is required in the target markets].

When this policy changes we will update the date above and, for material changes, notify account holders by email before the change takes effect.

Questions about privacy: support@docubox.io. See also our terms and security pages.