Privacy Policy

1. Introduction

DocuLexis AI ("we", "us", "our") operates the doculexis.ai website and document intelligence platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. By accessing or using DocuLexis AI, you consent to the data practices described in this policy.

2. Information We Collect

Account Information

When you register for an account, we collect:

• Name and email address
• Company name and job title
• Billing and payment information
• Phone number (optional)

Document Data

When you use our platform, we process the documents you upload for extraction. See Section 4 for details on how document data is handled.

Usage and Analytics Data

• API call logs, endpoints accessed, and response metadata
• Feature usage patterns and session duration
• Device type, browser version, operating system, and IP address
• Referring URLs and pages visited on our site

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, maintain, and improve our document intelligence services
• Process and extract data from documents you submit
• Send transactional communications (account confirmations, invoices, security alerts)
• Provide customer support and respond to your requests
• Monitor and ensure the security and integrity of our platform
• Comply with legal obligations and enforce our Terms of Service
• Generate aggregated, anonymized analytics to improve our models and services

4. Document Data Processing

We take document privacy extremely seriously. Our commitments:

• Documents are processed in memory and are not stored permanently unless you explicitly opt in to storage features
• Extraction results are returned via API and are not retained after successful delivery
• No document content is used to train, fine-tune, or improve our machine learning models
• Document processing occurs in isolated, encrypted environments
• Temporary processing data is purged immediately after extraction is complete

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

• With infrastructure providers (AWS, GCP) operating under strict Data Processing Agreements (DPAs)
• With payment processors to handle billing transactions
• When required by law, regulation, subpoena, or court order
• To protect the rights, safety, or property of DocuLexis AI, our users, or the public
• With your explicit consent

6. Data Security

We implement industry-leading security measures to protect your data:

• SOC 2 Type II certified infrastructure and processes
• Encryption at rest using AES-256 and in transit using TLS 1.3
• Role-based access controls with principle of least privilege
• Regular third-party security audits and penetration testing
• Multi-factor authentication for all internal systems
• Automated threat detection and incident response procedures

7. Data Retention

• Account data is retained for the duration of your active account and for thirty (30) days after deletion
• Document data is purged immediately after processing unless storage is explicitly enabled
• Usage logs and analytics data are retained for ninety (90) days
• Billing records are retained as required by applicable tax and financial regulations

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate or incomplete data
• Deletion: request that we delete your personal data, subject to legal retention requirements
• Portability: request your data in a structured, machine-readable format
• Opt-out: unsubscribe from marketing communications at any time
• Restriction: request that we restrict processing of your data under certain conditions

To exercise any of these rights, please contact us at privacy@doculexis.ai. We will respond within thirty (30) days.

9. International Data Transfers

DocuLexis AI processes data primarily in the United States. If you are located outside the US, your data may be transferred to and processed in the US. For customers in the European Economic Area (EEA) and United Kingdom, we offer Standard Contractual Clauses (SCCs) as a lawful transfer mechanism upon request.

10. Cookies and Tracking

We use cookies and similar technologies on our website:

• Essential cookies: required for site functionality (authentication, preferences). These cannot be disabled.
• Analytics cookies: used to understand how visitors interact with our site. These are only set with your consent.
• We do not use advertising or third-party tracking cookies

You can manage your cookie preferences through your browser settings or our cookie consent banner.

11. Children's Privacy

DocuLexis AI is not directed at individuals under the age of sixteen (16). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via email to your registered account address or through a prominent notice on our website at least thirty (30) days before they take effect.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy, please contact us at:

DocuLexis AI
Email: privacy@doculexis.ai
California, USA