Privacy Center
At a glance
- Your documents are used only to run DocuFinds for you. (If you rate an answer, the short excerpt you rated is reviewed by our team.)
- No AI model training on your documents — not by us, not by our AI provider.
- Private to your account: never shared with other customers, never sold.
- Encrypted in transit and at rest; access enforced by row-level security.
- Export your workspace or delete your account whenever you want.
Your controls
- Export everything: Settings → Workspace & backups.
- Delete your account and its data: Account → Delete account. Files, indexes, chats, settings, feedback and usage events are removed.
- Reminder emails: switch deadline emails on or off in the account panel, or use the link in any email.
- Feedback: ratings are optional. Corrections you ask DocuFinds to remember affect only your account, and you can delete them (Account → My review rules).
- Billing: change your card, download invoices or cancel in Manage billing.
Make a privacy request
To access, correct, delete or get a copy of your personal information, or to ask how we handle it, email [email protected] from the address on your account and tell us what you need. We may ask you to verify your identity. We aim to respond within 30 days.
How AI uses your documents
When you ask a question, DocuFinds searches your own documents first and sends only the passages needed for that answer to a third-party AI model provider, which does not train on this data. Every answer cites its source page so you can check it, and quotes that can’t be found in the document are flagged.
Subprocessors
- Cloudflare — hosting and server functions.
- Supabase — database, file storage and sign-in.
- AI model provider — answering questions (no training on your data).
- Stripe — payments and billing.
- Email delivery provider — sign-in links and reminders.
Need provider names and processing locations for a vendor review? Email [email protected].
Security practices
- HTTPS everywhere; our providers encrypt stored data at rest.
- Row-level security: each account can only read its own data, enforced in the database.
- Secrets and keys stay on the server, never in the app.
- Least-privilege staff access, used only for support you request, abuse or security investigations, or legal requirements.
- Payments handled by Stripe; we never store card numbers.
For companies
Evaluating DocuFinds for your company? We’re glad to complete security questionnaires, walk your IT or legal team through how data flows, and discuss contract terms such as a data processing agreement for Enterprise customers. DocuFinds does not currently hold third-party security certifications such as SOC 2. Contact [email protected] or request a demo.
Report a security issue
If you believe you’ve found a security vulnerability, email [email protected] with the details and steps to reproduce. Please don’t access other people’s data or disrupt the Service while testing. We’ll acknowledge your report and keep you updated.
Related policies
Read the full Privacy Policy for what we collect and why, and the Terms of Service for the agreement that covers using DocuFinds, including confidentiality and AI terms.