Privacy Policy

2.1 Account Information

• Full name
• Email address
• Password (encrypted)
• Phone number (optional)
• Profile details (optional)

2.2 Document and File Data

• Files uploaded by users (documents, images, PDFs, etc.)
• Metadata related to each file, such as:

• File name
• File size
• Upload timestamp
• File permissions
• Version history

All files and sensitive metadata are end-to-end encrypted.

2.3 Application Usage Data

• Actions performed on documents (view, download, edit, delete)
• Login attempts and timestamps
• IP address and device information
• Audit logs of user activities

2.4 Automatically Collected Data

• Browser type and operating system
• Access times
• Error logs and crash reports (non-sensitive)

3.1 Service Delivery

• Create and manage user accounts
• Enable storing, retrieving, and sharing documents
• Maintain access control and permissions

3.2 Security and Compliance

• Prevent unauthorized access
• Provide audit logging
• Comply with SOC 2, GDPR, HIPAA-related standards
• Detect and prevent security incidents

3.3 Service Improvement

• Enhance user experience
• Troubleshoot technical issues
• Analyze usage patterns

3.4 Communication

• Notify users of updates
• Provide support and respond to inquiries

5.1 Service Providers

Trusted third-party providers assist with cloud storage, authentication, encryption key management, monitoring, and email notifications. All providers are bound by confidentiality agreements.

5.2 Legal Compliance

We may disclose information if required by law, court order, or regulatory obligations.

5.3 Business Transfers

If we undergo a merger or acquisition, data may be transferred subject to continued protection.

6.1 Encryption

• End-to-end encryption
• AES-256 encryption at rest
• TLS 1.2+ encryption in transit

6.2 Access Controls

• Role-based permissions
• Multi-factor authentication
• Session monitoring

6.3 Infrastructure Security

• Firewalls and isolation
• Continuous vulnerability scanning
• Annual penetration testing