Privacy Policy

Privacy Policy

Effective date: July 3, 2026 · Operated by Dock Group Limited

DockDocs (“we”) is operated by Dock Group Limited. This policy describes exactly what happens to your files and data — every statement below can be verified in your browser's developer tools (F12 → Network).

1. Your files

Most tools process files entirely in your browser. For the tools marked with the “runs locally” badge (compress, merge, split, rotate, watermark, redact, sign, protect, OCR, and others), your file never leaves your device. No upload takes place.

Eight conversion tools use a third-party conversion service. Word/Excel/PowerPoint/HTML → PDF, PDF → Word/Excel/PowerPoint, and PDF/A conversion upload your file to CloudConvert (CloudConvert GmbH, Germany) for processing. Files are transferred over TLS, processed, and deleted from the conversion service right after your download completes. We do not keep a copy of your file on our own servers at any point.

AI analysis tools send extracted text — not your file — to AI models. When you use Chat with PDF, AI Summary, contract risk review, and similar tools, the text content of your document (extracted in your browser) is sent to AI models via OpenRouter for processing. We do not store your document text on our servers. AI responses are generated per request; we do not use your documents to train models.

2. Data stored in your browser

Chat history and document excerpts for the AI tools are saved locally in your browser (localStorage) so you can revisit them — they are never uploaded to our servers. You can delete them at any time from the workspace, or by clearing your browser storage. If you use a shared computer, we recommend clearing them after use.

3. Account data

If you create an account, we store your email address and authentication identity via Supabase (our authentication and database provider). We use it to sign you in, associate your plan, and enforce usage limits. We do not sell or share your email with anyone.

4. Payments

Payments are processed by Creem (merchant of record). Your card number is entered on and processed by Creem — we never see or store it. We receive only your subscription status and a customer reference.

5. Analytics

We use self-hosted umami analytics (running on our own server) to count page views. It is cookie-free and does not build cross-site profiles. We do not use Google Analytics or advertising trackers.

6. Sub-processors

ProviderPurposeData involved
CloudConvert GmbHFile conversion (8 tools)The file you convert (deleted after your download completes)
OpenRouter, Inc.AI model routingExtracted document text for AI tools
SupabaseAuthentication & account dataEmail, auth identity, plan status
CreemPaymentsPayment details (handled entirely by Creem)
NetlifyHostingStandard server logs (IP, user agent)

7. Your rights

You can delete your account and associated data at any time from your account page (this also removes billing records we control). For any privacy request or question, contact hello@dockdocs.app. If you are in the EEA/UK, you have the rights provided by the GDPR (access, rectification, erasure, portability, objection); if in California, the rights provided by the CCPA.

8. Changes

We will update this page when our data practices change, and note the effective date above.