Privacy Policy

• Customers: people who create a DocVist account to share documents.
• Visitors: people who open a link a customer shared. Visitors do not need an account.

Questions about this policy or your information: [email protected].

• Account: your email address and name. If you sign up with a password, we store only a salted one-way hash of it, never the password itself. If you sign in with Google, we receive the data described in section 4.
• Organization details (optional): organization name, website, logo and brand color, if you choose to add them.
• Your documents: the files you upload, their titles and file names, their earlier versions (for the period your plan allows), and the settings of your share links (for example whether a link has a password, which is also stored only as a hash, or whether downloads are allowed).
• Plan and payments: your plan, subscription status and payment history (amounts, dates, status). Card details are entered at Stripe and are never seen or stored by DocVist.
• Security and support records: a log of important actions on your account (for example sign-ins, link changes, deletion requests) and the messages you send to our support team.

When someone opens a shared link, DocVist records a visit so that the document owner can see how the document is used:

• a random identifier stored in a cookie, used only to count unique visitors;
• the approximate country (a two-letter code provided by our network provider);
• the browser family and device category (for example Chrome, desktop);
• the website the visitor came from, as a host name only;
• which pages were viewed, for how long, and whether the file was downloaded.

We do not store the visitor's IP address, name, email address or the full browser identification string as part of this record, and we do not build profiles of visitors. This information is shown to the owner of the document that was opened, and to nobody else.

Our hosting and network providers process IP addresses in the course of delivering the service and protecting it from abuse (for example to limit repeated sign-in attempts).

If you accept analytics cookies on our public website (home page, pricing and legal pages), we use Google Analytics to count visits and understand which pages are useful. Google Analytics receives the pages you view, your approximate location, your device and browser type, and how you arrived, and sets cookies in your browser. Nothing is loaded and no cookie is set until you accept, and you can change your choice at any time with “Cookie settings” in the footer.

Analytics is never used inside the DocVist application or on pages that show a customer's shared document: people who open a shared link are not reported to Google Analytics.

You can sign in or sign up with your Google account. If you do, Google shares with us:

• your name,
• your email address (which must be verified by Google), and
• a stable Google account identifier, used to recognize you the next time.

These come from the basic openid, email and profile permissions. DocVist does not request access to your Gmail, Drive, Calendar, contacts or any other Google service.

• Use: only to create your account, sign you in and send you service emails. Never for advertising, profiling or resale.
• Sharing: not shared with anyone except the service providers listed in section 6, only as needed to run the service.
• No machine learning: we do not use Google user data to develop, improve or train AI or machine-learning models.
• Protection and retention: as described in sections 8 and 9. Google data is deleted when you delete your account.
• Revoking access: you can remove DocVist from your Google account at any time at myaccount.google.com/permissions.

DocVist's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• to provide the service: store your documents, serve your links, show analytics;
• to manage your plan, take payments and send receipts and billing notices;
• to send service emails: account confirmation, password reset, security and payment notices. We do not send marketing email;
• to keep the service secure and prevent abuse and fraud;
• to answer support requests and meet legal obligations.

Where the law requires a legal basis (for example in the EU, the UK and Brazil), we rely on: performing our contract with you; our legitimate interest in running and securing the service and in giving document owners the analytics they ask for; legal obligations; and your consent where we ask for it.

We use a small number of service providers, each only for what the service needs:

• Railway: application hosting and the database.
• Cloudflare: private file storage (R2), DNS and network protection.
• Stripe: payment processing and subscriptions.
• Resend: delivery of service emails.
• Google: sign-in, if you choose it, and website statistics through Google Analytics, only if you accept analytics cookies.

Document owners receive the visit information described in section 3 about their own documents. We may disclose information if required by law or to protect the rights and safety of DocVist and its users, and it would transfer with the service if DocVist is ever acquired. We never sell personal information or share it for advertising.

DocVist sets the cookies it needs to work and, only with your consent, analytics cookies on the public website. There are no advertising cookies.

• Sign-in cookies (session, CSRF protection and redirect): keep you signed in for up to 24 hours and protect your account.
• Visitor cookie (dv_vid): set only on shared-link pages, first-party, valid for one year. It holds a random identifier used to count unique visitors for the document owner.

• Analytics cookies (_ga and _ga_*, set by Google Analytics): only on the public website, only if you accept. They last up to two years. Choosing “Decline” or changing your choice removes them.

We use no advertising services. Inside the application and on shared documents there are no analytics or third-party cookies.

• All traffic uses HTTPS.
• Passwords and link passwords are stored only as salted one-way hashes.
• Files are kept in private storage and delivered through short-lived signed links.
• Access is limited to what is needed, sign-in attempts are rate-limited and sensitive actions are logged.

No system is perfectly secure, but we work to protect your information.

• Account and documents: until you delete them or delete your account.
• Earlier versions of a document: for the period your plan allows, then they are removed automatically.
• Visit information: kept with the document and removed when the document or the account is deleted.
• Payment records: held by Stripe for as long as the law requires. Our copy of your payment history is removed with your account.
• Backups: removed data can remain in our hosting provider's backups for a limited period before it is overwritten.

You can permanently delete your account and everything attached to it:

1. Start the deletion from Settings in your account.
2. We send a confirmation email. The deletion only proceeds once you confirm it.
3. When you confirm, your account is disabled immediately: your shared links stop working and your subscription is canceled.
4. You then have a 15-day grace period, during which you can change your mind by contacting support and ask for the deletion to be reversed.
5. When the 15 days end, your account, documents, files, share links, visit information and payment history are permanently deleted from our systems. This cannot be undone.

Need your data removed immediately? Write to [email protected] and we will remove it without waiting for the 15 days.

After a deletion we keep one minimal record that it happened, so we can prove it and prevent abuse: a pseudonymous identifier, the optional reason you gave, the date, a one-way hash of the requesting IP address and the browser identification string. It contains no email address, name or documents.

Depending on where you live (for example under the GDPR, the UK GDPR, Brazil's LGPD and California law), you have the right to access the information we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict some processing and withdraw consent you gave. You can also complain to your data protection authority.

You can correct your name and organization details and delete your account from Settings. For anything else, including access and portability requests, write to [email protected]. We may need to verify your identity first and we answer within the time the law requires. We do not sell or share personal information for advertising.

Our providers may process information in the United States and in other countries where they operate. Where the law requires it, these transfers rely on appropriate safeguards such as standard contractual clauses.

DocVist is not intended for anyone under 16 and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

When we change this policy we update the date above. For material changes, including any change in how we use Google user data, we notify account holders by email before the change applies.

[email protected]. See also our Terms of Service.