Privacy Policy

DocuAhead is a personal document-organization and deadline-reminder application: you upload documents, DocuAhead uses an AI service to read them, and the Service tracks resulting deadlines and sends reminders. For any question about this Policy or how your information is handled, contact us using the details in "Contact us" below.

This Policy applies to the DocuAhead web application, its public marketing pages, and any DocuAhead mobile application that later links to it. It does not apply to third-party sites or services you reach through links inside DocuAhead, or to information you give directly to a service provider listed below under that provider's own privacy terms.

We collect the categories of information below. We do not collect payment or billing information today — DocuAhead does not yet process payments (see "Plans and subscriptions" in our Terms of Service).

• Account information: the email address and password you sign up with (your password is never visible to us in plain text), your chosen display language, appearance preference, and notification preferences.
• If you choose to sign in with Google or Apple: the email address and account identifier that provider sends us (and your name, if the provider shares it). We never receive your Google or Apple password. If you use Apple's "Hide My Email", we receive and use Apple's private relay address as your email address, which may not match any other address you use with us.
• Evidence that you agreed to our Terms of Service and acknowledged this Privacy Policy: the versions we presented to you, the language you were shown them in, and the date and time you accepted them.
• Document content you upload: the PDF, JPEG, or PNG file itself, its original filename, and its file size.
• AI-generated analysis of that content: a document type label, title, summary, sender/organization, any date or amount the AI identified, whether action is required, and a confidence score.
• Deadlines and reminders: due dates you confirm or create from an analysis, their completion status, and which reminder emails have been sent or dismissed.
• Support requests: the category, subject, and message you submit, the page you submitted it from, basic technical information about your browser and device, your plan at the time, and, if relevant, the document your request refers to.
• Account activity such as sign-in history and your current plan or trial status.
• Technical information collected automatically when you use the Service, such as your IP address and request logs — used for security, reliability, and abuse prevention, not advertising.

We do not knowingly collect more than the fields listed above, and we do not use hidden trackers, fingerprinting scripts, or advertising pixels to collect additional information about you.

• To provide the Service: create and secure your account, store and let you retrieve your documents, run AI analysis you request, track deadlines, and send the reminder emails you've enabled.
• To communicate with you: transactional emails (sign-up confirmation, deadline reminders, support-request confirmations) and, if you contact support, replies to your request.
• To secure the Service: detect and limit abusive activity (for example repeated failed logins or excessive analysis requests), and to enforce our Terms of Service.
• To maintain and improve the Service: diagnose errors, understand aggregate usage of features (for example, how many documents are analyzed), and plan future functionality.
• To comply with legal obligations and respond to lawful requests, where applicable.

We do not sell your personal information, and we do not use your documents or account information to serve you advertising.

AI analysis is central to DocuAhead, so we want this section to be concrete about what actually happens when you click "Analyze":

• The document you selected — the full file, not just extracted text — is sent to our AI service provider, Anthropic, together with an instruction describing the fields to extract.
• Anthropic's model returns structured data only (the fields listed in "Information we collect" above); we store that result linked to the source document in our database.
• If you use DocuAhead in French, the text your analysis produced may be translated by sending it to Anthropic a second time, with sensitive details such as dates, amounts, and names shielded beforehand so they are not exposed as plain text in that request.
• We do not send your account email, password, or billing information to Anthropic as part of analysis or translation.

Anthropic's published commercial terms state that content submitted through its API is not used, by default, to train its models — the stated exceptions are if a customer explicitly opts in or submits feedback through a dedicated channel, neither of which DocuAhead does. Anthropic also states that this content is automatically deleted from its systems within 30 days of processing, unless a different arrangement applies; DocuAhead has not arranged anything different, so this standard applies today. These are Anthropic's own published terms, not a guarantee DocuAhead independently makes on Anthropic's behalf.

AI analysis can be wrong. Extracted dates, amounts, and summaries are a starting point, not a verified fact — always check an extracted deadline or amount against the original document before relying on it, and see the "No professional advice" section of our Terms of Service.

We share information only with the service providers that help us run DocuAhead (each acting as our service provider, not as an independent owner of your data), and only to the extent needed to provide the Service:

• Supabase — authentication, database, and private file storage.
• Google and Apple — only if you choose to sign in with them, in which case that provider authenticates you and shares the account details described above with us. Their handling of your information is governed by their own privacy policies.
• Anthropic — AI document analysis and translation, as described above.
• Resend — delivery of deadline-reminder and support-related transactional emails.
• Vercel — application hosting and the scheduled job that triggers daily reminder emails.

This list reflects the providers we currently use and may change as the Service evolves. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We may disclose information if required by law, to protect the rights, safety, or property of DocuAhead or others, or in connection with a merger, acquisition, or sale of assets — in which case this Policy would continue to govern any personal information involved until you're notified of any change.

Our service providers (Supabase, Anthropic, Resend, and Vercel) may process information — including document content — on infrastructure located in the United States and other jurisdictions where they operate. If you are located in Quebec, this means your personal information may be communicated outside Quebec. Quebec's privacy law requires us to consider the protection that information will receive when processed outside the province, and we take this into account in choosing and contracting with our service providers.

• Account, document, analysis, and deadline data: retained for as long as your account exists, or until you delete the specific document or deadline.
• Records of your Terms/Privacy Policy acceptance: retained for as long as your account exists, and removed together with your account.
• Support tickets: retained to maintain a record of support history.
• Usage and security logs: retained only as long as needed for quota enforcement, security, and abuse prevention, and are generally short-lived.

Deleting your account or a document removes it from our active systems, as described in "Account and document deletion" below. As with most cloud-hosted services, brief residual copies may exist in routine backups for a limited time before being purged as part of standard operations — these are not used for any other purpose.

We use safeguards appropriate to the sensitivity of the information involved, including:

• Documents are stored privately and are only accessible to the account that uploaded them — there are no public or permanent links to your files.
• Every document, analysis, deadline, and preference is tied to your account, with independent checks at both the infrastructure and application level.
• Document files are served through authenticated pages rather than public links.
• Credentials used to connect to our AI, email, and hosting providers are kept on our servers and are never sent to your browser.
• We apply standard web security protections, and sensitive actions (such as changing your password or deleting your account) require re-authentication and are limited in frequency to help prevent abuse.

No online service can guarantee complete security, and we continually work to improve our safeguards. See "Confidentiality incidents" below for what we do if something goes wrong.

Subject to applicable law in your location (which may include PIPEDA and, for Quebec residents, Quebec's private-sector privacy law as amended by Law 25), you may have the right to:

• Access the personal information we hold about you.
• Correct or rectify inaccurate information.
• Request deletion of your account and associated information.
• Request a copy of certain information you provided, in a structured, commonly used format, where technically feasible.
• Withdraw consent, where our processing relies on your consent, without affecting processing that already took place.
• Lodge a complaint with the applicable privacy regulator — for example the Office of the Privacy Commissioner of Canada, or, for Quebec residents, the Commission d'accès à l'information.

You can exercise your access, correction, and language preferences directly from Settings inside the app. For any other request, contact us using the details in "Contact us" — we will verify your identity before acting on a request that affects your account.

You can delete an individual document at any time from your document list. You can permanently delete your account from Settings → Privacy & Data, which requires you to type a confirmation phrase and re-enter your password. When you do:

• We remove every file you uploaded from storage first, and only proceed if that step fully succeeds.
• Deleting your account then removes your documents, AI analyses, deadlines, reminder history, notification preferences, support tickets, acceptance records, and plan/usage records — this is immediate, not a delayed or queued process.
• Your sign-in session is revoked immediately as part of the same action.

As noted under "Data retention", this does not instantly purge copies that may exist in routine backups for a limited time. There is currently no separate marketing-email list to remove you from, because DocuAhead does not send marketing email today.

DocuAhead uses a small number of first-party cookies, all strictly necessary or functional — none are used for analytics, advertising, or cross-site tracking, and we do not load any third-party advertising or analytics script:

• Authentication/session cookies — strictly necessary to keep you signed in.
• A theme-preference cookie — functional, remembers your light/dark/system appearance choice.
• A language-preference cookie — functional, remembers your chosen display language across visits, including when signed out.

Because DocuAhead does not currently use analytics or advertising cookies, we have not implemented a cookie-consent banner — one would not reflect anything a visitor actually needs to consent to today. If that changes, this section and our practices will change together, before any such technology is deployed.

The Service is not directed to children and is restricted to users who are at least 18 years old (see "Eligibility" in our Terms of Service). We do not knowingly collect personal information from anyone under 18, and we do not have an age-verification mechanism in place beyond the account-creation requirement itself. If you believe someone under 18 has provided us with personal information, contact us using the details below and we will take appropriate steps to remove it.

DocuAhead does not sell personal information and does not use it for cross-context behavioral advertising. Depending on your state of residence and applicable legal thresholds, you may have additional privacy rights under state law. If you believe a specific right applies to you, contact us using the details below and we will respond appropriately.

For residents of Quebec, this Policy is intended to meet the transparency requirements of Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25, including with respect to the purposes of collection, cross-border communication of information (see "Cross-border and international processing" above), and your rights of access, rectification, and de-indexation where applicable. DocuAhead has designated a Privacy Officer, the person responsible for the protection of personal information; their name will be published together with DocuAhead's operating legal entity details ahead of general availability. Until then, direct any privacy request or question to the contact in "Contact us", and it will be routed to the Privacy Officer.

If we become aware of a confidentiality incident (an unauthorized access, use, or communication of personal information, or its loss) that presents a risk of serious injury, we will assess the incident, take reasonable steps to reduce the risk of harm, and notify affected individuals and, where required by law, the applicable regulator (for example the Commission d'accès à l'information for Quebec residents, or the Office of the Privacy Commissioner of Canada). As of the effective date of this Policy, we have not experienced a confidentiality incident requiring notification.

We may update this Policy as DocuAhead's features, providers, or legal obligations change. We will update the "Last updated" date below, and for material changes we will provide more prominent notice (for example, an in-app notice or an email) before the change takes effect.

For any question about this Policy or your personal information, including requests to our Privacy Officer, contact us at docuahead@gmail.com.