Privacy Policy
Last updated: March 2026
1. Overview
DocPrivy ("we", "our", "the service") is a free online tool that extracts structured data from documents using artificial intelligence. We are committed to protecting your privacy and being transparent about how we handle your data.
2. Document Processing
- Documents you upload are processed in memory only and are never stored on our servers.
- We do not store your original documents on our servers. Processing occurs in-transit and is ephemeral — files exist only for the duration of the extraction request and are immediately discarded.
- We do not retain, copy, or archive any uploaded documents.
- Extraction results are returned directly to your browser and are not saved server-side.
3. Personal Information
DocPrivy does not require accounts, sign-ups, or login. We do not collect your name, email address, or any personal information.
4. Data We Collect
We collect minimal, anonymous data for service operation:
- IP address — used solely for rate limiting (preventing abuse). Not stored persistently.
- Usage logs — anonymous request metadata (file type, file size, processing time) for monitoring service health. No document content is logged.
5. Third-Party Services
- AI Processing (Google Gemini) — Documents are processed using Google's Gemini 2.5 Flash Lite model via the Gemini API. Document data is transmitted securely over encrypted connections and processed ephemerally — it is not retained by Google beyond the processing request. API inputs are not used for model training. Our use of Google API services complies with the Google API Services User Data Policy, including the Limited Use requirements.
- Google AdSense — We display advertisements through Google AdSense, which may use cookies to serve personalized ads based on your browsing history. You can opt out of personalized advertising at Google Ads Settings.
- Vercel — Our service is hosted on Vercel. Vercel may collect standard server logs (IP address, user agent) as part of their hosting infrastructure.
6. Cookies
DocPrivy itself does not set cookies. However, Google AdSense and its partners may set cookies for advertising purposes. These are governed by Google's privacy policies.
We use localStorage (not cookies) to save your language preference and client-side rate limit state. This data stays on your device and is never sent to our servers.
7. Security
- All connections use HTTPS encryption.
- We enforce strict Content Security Policy (CSP) headers.
- File uploads are validated for type (magic bytes) and size before processing.
- Rate limiting protects against abuse.
8. Children's Privacy
DocPrivy is not directed at children under 13. We do not knowingly collect any information from children.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.
10. Contact
If you have questions about this privacy policy, please reach out via our GitHub repository or contact us at the email listed on our website.