Privacy Policy

Introduction

DocChat is a service that turns your PDF, DOCX, and TXT documents into a searchable, RAG-powered AI chatbot. We take your privacy seriously. This policy explains what data DocChat accesses, how it is processed, and what we do — and don't — collect.

Data We Collect

The following data is collected when you use DocChat:

• Account information: Your email address and name, provided when you create an account via Supabase Auth.
• Uploaded documents: The PDF, DOCX, and TXT files you upload, along with extracted text and generated embeddings, so DocChat can answer questions about them.
• Chatbots and messages: The chatbots you create, their widget configuration, and the questions-and-answers exchanged through them.
• Usage data: Anonymous counts of messages and documents used, tracked monthly to enforce plan limits.
• Billing data: Your plan, subscription cycle, and payment status, used to manage your subscription.

How We Use Your Data

Your data is used solely to operate and improve the DocChat service:

• To index your documents and generate grounded, source-cited answers to your visitors' questions.
• To manage your account, chatbots, subscription, and plan usage limits.
• To send transactional emails (payment confirmations, renewal reminders, and notices) when required.

We do not sell, rent, or share your personal data with any third party for advertising or marketing purposes.

AI Processing

DocChat uses Google Gemini to generate embeddings and to answer questions grounded in your documents. When you ask a question, the most relevant passages from your own documents are retrieved and sent to Gemini to produce a contextual answer with source citations.

Your documents are never used to train AI models, and they are not shared with any party beyond the processing required to provide the service.

Payments

Payments are processed by lava.top, a third-party payment provider. Card details are handled entirely by lava.top and are never stored on our servers. We receive and store only your plan, billing cycle, and payment status in order to manage your subscription.

Third-Party Services

DocChat relies on the following third-party services to operate:

• Supabase — authentication and database storage.
• Google Gemini — AI embeddings and answer generation.
• lava.top — payment processing.
• Resend — transactional email delivery.
• Upstash — rate limiting that uses a temporary identifier (such as an IP address) to prevent abuse.
• Vercel — hosting and infrastructure.

Each of these services has its own privacy policy. We recommend reviewing them if you have specific questions about their data practices.

Data Security

We take appropriate measures to protect your data, including encryption in transit and at rest, access controls on our database, and limited data retention. Your documents are stored securely in Supabase and are only accessible to you and your authorized chatbots.

Data Retention

Your documents, chatbots, and account data are retained while your account is active. You can delete your documents and chatbots at any time from the dashboard, and you may delete your account to permanently remove the associated data.

Cookies

DocChat does not use cookies for cross-site tracking. We use only the minimal storage required for authentication and to keep you signed in.

Children's Privacy

DocChat is not directed at children under the age of 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, contact us and we will delete it.

Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at the email below and we will respond within a reasonable timeframe.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of DocChat after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or your data, email us at artem.kx@proton.me.