Last updated: 24 July 2026
Privacy Policy
1. Controller
The operator of this DocDecide instance is the data controller for account and usage data. Update this section with your company name, address and contact email before going live.
2. Data we process
Account data (name, email, password hash), plan/usage metadata, uploaded documents for analysis, AI outputs, and technical logs. Payment data is processed by Stripe when payments are enabled.
3. Purpose and legal basis
We process data to provide the service, enforce quotas, improve reliability, and meet legal obligations. Basis: contract performance and legitimate interests in securing the service.
4. AI processors
Document content may be sent to OpenAI (or configured AI providers) for analysis. Those providers process data under their terms and may process outside the EEA. Do not upload data you are not allowed to transfer.
5. Retention
Account data is kept while the account is active. Analysis history may be retained to show usage in the dashboard. You may request deletion of your account and associated history.
6. Your rights
Depending on applicable law (including GDPR), you may request access, correction, deletion, restriction, portability, and object to certain processing. You may lodge a complaint with a supervisory authority.