Privacy Policy

1. Introduction

DocuSift ("we", "our", "us") is operated from India and provides the docusift.co website and the DocuSift document processing platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account information

When you create an account, we collect your name, email address, and organization name. If you subscribe to a paid plan, our payment processor (Stripe) collects billing information — we do not store credit card numbers.

Documents you upload

Documents you submit for processing are used solely to provide the extraction service. We do not use uploaded documents to train AI models. Documents are retained according to your tenant's configured retention period, which you can adjust in your account settings. Once the retention period expires, documents are automatically and permanently deleted.

Usage data

We collect standard log data (IP addresses, browser type, pages visited, timestamps) to operate and improve the service.

3. How We Use Your Information

• To provide and maintain the document processing service
• To manage your account and process payments
• To send transactional emails (account verification, password resets, billing receipts)
• To respond to support requests and inquiries
• To monitor and improve service performance and security

4. Data Sharing

We do not sell your personal information. We share data only with:

• Service providers — hosting (AWS), payments (Stripe) — bound by data processing agreements
• Legal requirements — when required by law, court order, or to protect our rights

5. Data Retention

Account data is retained while your account is active. Uploaded documents are retained for a configurable period set by your organization's admin (the default retention period is defined in your tenant settings). After the retention period, documents are automatically and permanently deleted. When you delete your account, all associated data is permanently removed within 30 days.

6. Data Security

We use industry-standard measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest, and strict access controls. SOC 2 Type II certification is in progress.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at privacy@docusift.co.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

9. International Transfers

DocuSift is operated from India. Our primary data infrastructure is hosted on AWS in the United States. Customers on eligible plans may choose to store their data in other AWS regions. Data transfers across borders are protected by appropriate safeguards, including Standard Contractual Clauses where applicable.

10. Children's Privacy

DocuSift is not intended for individuals under 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or a notice on our website.

12. Contact

If you have questions about this Privacy Policy, contact us at: privacy@docusift.co