Privacy notice

Your documents. Your data. Your choices.

This notice explains how DocInspect AI handles personal information and how people in the European Economic Area and California can exercise their privacy rights.

Effective September 26, 2026

01

Your privacy rights

GDPR and California privacy law can provide a right to delete covered personal information. Signed-in users can submit that request directly from the account privacy controls.

Delete

Use the authenticated deletion control to erase your account and associated data.

Verify

Sign in and confirm the account email before the deletion request is accepted.

We will not discriminate against you for exercising a California privacy right. We may verify your identity before fulfilling a request.

02

Information we handle

Account identifiers

Name, email address, authentication records, sessions, IP address, user agent, and API keys.

Documents and results

PDFs you upload, filenames, file metadata, comparison prompts, and generated comparison results.

Commercial information

Plan, subscription state, usage, credit balance, charge references, and Stripe customer identifiers.

Uploaded documents may contain personal or sensitive information selected by the user. Do not upload information you are not authorized to process.

03

How and why we use information

  • Provide the service: authenticate users, compare documents, store results, and deliver requested files.
  • Perform our contract: administer plans, usage limits, credits, subscriptions, and payments.
  • Protect the service: prevent fraud and abuse, secure accounts, enforce rate limits, and troubleshoot failures.
  • Meet legal obligations: maintain tax, accounting, and dispute records where required.

DocInspect does not use comparison results to make decisions that produce legal or similarly significant effects about individuals.

04

Service providers and disclosures

Information is disclosed only as needed to operate the service, comply with law, or protect rights and safety. Categories of recipients include:

  • AnthropicAI document processing
  • Stripepayments, subscriptions, fraud prevention, and transaction records
  • Resendtransactional account email
  • Hosting and storage providersapplication, database, and file infrastructure
  • Authorities or professional advisersonly where legally required or necessary to protect legal rights
05

Retention and account deletion

Uploaded files remain downloadable for the retention period included with the plan and are scheduled for permanent deletion no later than one year after upload. Account and comparison data is kept while needed to provide the service or until an authenticated deletion request succeeds.

1Verify

Sign in and confirm the account email.

2Erase

Files, history, credentials, and account data are removed.

3Close

Subscriptions are cancelled and sessions are revoked.

06

EU/EEA and California details

GDPR

Requests are handled within the period required by GDPR, generally one month, subject to permitted extensions. You may complain to the supervisory authority where you live or work.

California

California residents may request deletion of covered personal information. Requests are handled within applicable California timelines, generally 45 days subject to permitted extensions.

We may update this notice as the service or law changes. Material updates will be reflected by a new effective date. This notice describes product behavior and is not a substitute for legal advice to organizations using DocInspect.