Privacy Policy

1. Introduction

DocSeek - Internal Documentation Manager ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our service.

2. Information We Collect

We collect several types of information to provide and improve our service:

2.1 Account Information

• Name and email address
• Organization name and details
• Password (encrypted)
• Profile information

2.2 Usage Information

• Documents and content you upload or connect
• Search queries and AI-generated responses (logged for analytics, including query text, response text, source references, token usage, and latency metrics)
• Team member information, roles, and permissions
• Integration connections and associated data (Telegram, Google Docs, Notion, etc.)

2.3 Telegram-Specific Data

When you connect Telegram integrations, we collect:

• Phone numbers used for Telegram authentication
• Telegram user IDs and usernames
• Encrypted Telegram session data
• Message content from Telegram chats you choose to index
• Chat metadata (chat names, member counts)

2.4 Technical Information

• IP address and device information
• Browser type and version
• Usage patterns and analytics data
• Cookies and similar technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our service
• Processing AI-powered search queries by sending your queries and relevant document excerpts to our AI provider (Anthropic Claude) for answer generation
• Managing your account and team access
• Processing payments and managing subscriptions via Stripe
• Sending transactional emails (account confirmations, password resets) via Resend
• Logging search queries for usage analytics, service improvement, and billing
• Improving our service and developing new features
• Detecting and preventing fraud or abuse
• Complying with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data in transit
• Encrypted storage of sensitive information
• Regular security audits and updates
• Access controls and authentication mechanisms
• Data backup and disaster recovery procedures

Your data is stored on secure servers in compliance with applicable data protection regulations.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

• Anthropic — AI query processing (your search queries and relevant document excerpts are sent to Anthropic's Claude API to generate answers)
• Stripe — payment processing and subscription management
• Supabase — database hosting and user authentication
• Vercel — frontend application hosting
• Hetzner — backend infrastructure hosting
• Resend — transactional email delivery
• Qdrant — vector search database for document indexing
• Third-party integrations you choose to connect (Telegram, Google, Notion)
• Law enforcement when required by law or to protect our rights

We do not use your content to train AI models. All third-party service providers are contractually required to maintain the confidentiality and security of your information and process it only as instructed by us.

6. Your Rights and Choices

You have the following rights regarding your personal data:

• Access and review your personal data
• Request correction of inaccurate information
• Request deletion of your data
• Export your data in a portable format
• Opt-out of marketing communications
• Withdraw consent for data processing

To exercise these rights, please contact us at info@docseek.online

7. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Track session activity for security purposes
• Cache onboarding and subscription status to improve performance

Specific cookies we use:

• Supabase auth cookies — authentication session management (HttpOnly, Secure)
• docseek_last_activity — tracks last activity for session timeout (30-minute window, HttpOnly)
• docseek_onboarding — caches onboarding completion status (5-minute TTL, HttpOnly)
• docseek_sub_status — caches subscription status (5-minute TTL, HttpOnly)

You can control cookies through your browser settings, but some features may not work properly if you disable cookies.

8. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will permanently delete your data within 30 days, except where we are required to retain it by law.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our infrastructure is located in:

• Hetzner — United States (Hillsboro, OR)
• Vercel — United States
• Anthropic — United States
• Stripe — Global
• Supabase — United States

We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws, including GDPR where applicable.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through our service. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us: