Privacy and your data
Who controls your documents, how they are stored and protected, which sub-processors we use, how long we keep data and how to delete your account.
Your documents are yours
For the documents, scans and templates you upload, you are the controller and DocuTract acts as your processor: we handle that content only to provide the service and only on your instructions. Our Data Processing Agreement governs that in full, and the Privacy Policy explains what we process and why.
How your files are protected
- Encrypted in transit, kept in private storage. Files travel only over an encrypted connection (HTTPS) and are kept in private storage reached only through short-lived, scoped links.
- Only your workspace can open them. Documents and templates belong to a workspace; other workspaces cannot see them.
- Never sold, never used to train models. We do not sell or share your content, and it is never used to train any AI models.
Sub-processors
To run extraction and deliver the service we use a small set of sub-processors:
- AI/OCR extraction;
- authentication and file storage;
- PDF rendering;
- a payment processor;
- opt-in analytics.
The current list, with the regions where each one processes data, is in the DPA.
Documents your clients send
When a client uploads files through a collection link, they first agree that the files will be read automatically to fill in a document. Those files become part of your document and are handled exactly like the scans you upload yourself.
Retention
We keep your content while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep for legal or accounting reasons (such as invoices).
Your rights
You can access, correct, export or delete your personal data at any time; the Privacy Policy explains how.
To delete your account, open Profile settings and use Delete account. If you own a workspace with other members, transfer its ownership first.
Questions
For anything about privacy that this page and the Privacy Policy do not answer, write to us from the contact page.