Privacy Notice

Last updated: 2026-07-11

This notice explains what data doc.page ("we", "us") collects when you use our website, tools, apps and API (the "Service"), why we collect it, and the rights you have. Our starting principle is that most of what the Service does happens on your device and never reaches us.

The tools are private

The PDF tools and the local‑AI features (text‑to‑speech, on‑device chat/summaries) run entirely in your browser. Your files are processed on your device, are not uploaded, and we never see them. A document you keep private is never sent to our servers.

Information we collect

  • Account data. When you create an account we store your email address and sign‑in sessions. If you subscribe, we store your plan and billing status.
  • Library metadata. Library documents stay on your device (browser storage). We store only metadata such as names and folders. We do not upload the files unless you explicitly share them.
  • Automatic / log data. Like most websites, our servers automatically record limited technical data when you interact with the Service — such as IP address, browser and device type, timestamps and the pages you request — to deliver the Service, keep it secure and prevent abuse.
  • Payment data. If you subscribe, payment is handled by Stripe. We do not receive or store your full card number; we only receive a transaction confirmation and limited billing details.
  • Sharing & viewer data. When you use Doc Links or Spaces, we collect the information described in "Doc Links, Spaces and visitor data" below.

How we use information and our legal bases

We use the information above to provide and secure the Service, to communicate with you about your account, to process payments, to prevent fraud and abuse, and to improve the Service using aggregated, de‑identified data. We do not use your content to train AI models. Where the EU/UK GDPR applies, we rely on: performance of a contract (to give you an account and the features you request), legitimate interests (to secure, troubleshoot and improve the Service, and prevent abuse), consent (for any optional marketing, which you can withdraw at any time), and legal obligation (to keep records we are required to keep).

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as needed to run the Service: Cloudflare (hosting, storage and network), Stripe (payments) and Resend (sign‑in and transactional email). We may also disclose data when we have a good‑faith belief it is necessary to comply with the law or a valid legal request, to enforce our terms, or to protect the rights and safety of users and the public. If doc.page is involved in a merger, acquisition or sale of assets, data may be transferred as part of that transaction; we will notify you of any change in control of your personal data.

Doc Links, Spaces and visitor data

When you share a document, its copy is stored on our servers so recipients can view it. If you enable email gating, watermarking, allowed‑viewer lists or an NDA, we collect from viewers: the email they enter, approximate country, page‑by‑page viewing time, and any signature. You are the data controller of that information; doc.page acts as a processor and only handles it to provide the sharing features you enabled. You must inform your viewers and have a lawful basis (e.g. consent). Viewers can contact you or us to exercise their rights.

International transfers

We and our providers may process data in countries outside your own, including the United States. Where we transfer personal data out of the EU/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or an adequacy decision where one applies).

Data retention and deletion

We keep personal data only for as long as needed to provide the Service, for as long as your account is active, or as required by law, whichever is longer. You can disable or stop sharing a link at any time, and delete documents from your library or shared copies from our servers. Deleting a shared document removes its file and associated visitor data, subject to short technical retention (e.g. backups) and any records we must keep by law. To delete your account, email us and we will action it.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct or delete it, to restrict or object to our processing, to receive it in a portable format, and to withdraw consent at any time. Where we act as processor for a User's viewer data, we will forward your request to that User. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at privacy@doc.page.

Children

The Service is not directed to children and we do not knowingly collect personal data from anyone under 16 (or the age required in your country). If you believe a child has provided us personal data, contact us and we will delete it.

Cookies, analytics and Do Not Track

We use privacy‑friendly, cookieless analytics for aggregate site usage. We use only the cookies needed to keep you signed in and to operate the Service. We do not currently respond to browser "Do Not Track" signals.

Changes to this notice

We may update this notice from time to time. If a change is material we will take reasonable steps to notify you (for example by email or a notice on the site). The "last updated" date above shows the current version.

Contact

Questions or requests about your privacy: privacy@doc.page.