Legal
Privacy Policy
Last updated: 2026-04-08. Questions: hello@docsiv.com. These documents are provided as drafts for integration; have qualified counsel review before reliance.
Introduction
[Legal entity name] (“Docsiv,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with the Docsiv website and services (the “Service”).
This policy applies to visitors to our marketing site, account holders, and workspace users. If you access Docsiv through a client or employer, that organization’s administrator may control certain settings; this policy describes Docsiv’s practices.
For cookie-specific information, see our Cookie Policy. For our role as a processor when customers use the Service to handle their end users’ data, see our Data Processing Agreement and Subprocessors list.
Who we are
Controller: [Legal entity name] (doing business as Docsiv)
Address: [Registered business address]
Contact: hello@docsiv.com
Privacy inquiries: hello@docsiv.com
Personal information we collect
Depending on how you use the Service, we may collect:
- Account and profile: name, email address, password (hashed), avatar, organization or workspace name, role, preferences.
- Authentication: if you use Google or other social login, we receive identifiers from that provider as described in their sign-in notice.
- Billing and transactions: billing contact details, payment status, and limited payment metadata processed by our payment provider (we generally do not store full card numbers).
- Usage and device: log-derived data such as IP address, approximate location from IP, browser type, device identifiers, pages or features used, timestamps, and diagnostic events.
- Content you provide: documents, comments, uploads, prompts, and similar Customer Content you choose to submit.
- Support and communications: messages you send us, survey responses, and call or chat records if you contact support.
- Marketing (if applicable): mailing lists, event registrations, or campaign engagement if you opt in or have a lawful basis for email under applicable law.
We do not knowingly collect personal information from children under 16 for the Service. If you believe we have, contact us and we will delete it.
How we use personal information
We use personal information to:
- Provide, operate, secure, and improve the Service.
- Create and manage accounts and workspaces; authenticate users.
- Process payments and collect amounts due.
- Provide customer support and respond to requests.
- Send transactional messages (verification, security notices, receipts).
- Send optional product or marketing communications where permitted; you may opt out via unsubscribe or account settings where available.
- Detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
- Comply with law, enforce our Terms of Service, and protect rights and safety.
- Analyze usage including product analytics and performance telemetry to understand reliability and feature usage (see Cookie Policy).
Lawful bases (GDPR and similar)
Where GDPR or UK GDPR applies, we rely on one or more of:
- Contract: processing necessary to provide the Service you request.
- Legitimate interests: securing the Service, improving features, analytics that are not overridden by your rights (you may object where applicable).
- Consent: where required for optional cookies or marketing (where we use consent).
- Legal obligation: compliance with law, law enforcement requests subject to valid process.
AI and automated processing
Some features use AI models hosted by us or subprocessors. Personal data you include in prompts or documents may be processed by those systems to generate outputs. We configure services to support our security and data protection commitments; model providers process data under their roles as subprocessors as described at Subprocessors. You should avoid including data you are not permitted to share.
Sharing and disclosures
We share personal information with:
- Service providers (subprocessors) that help us operate the Service (hosting, database, authentication, storage, email delivery, collaboration infrastructure, payments, analytics, AI inference). They are bound by contractual obligations. See Subprocessors.
- Professional advisors (lawyers, auditors) under confidentiality.
- Authorities when required by law or to protect rights, safety, or the Service.
- Corporate transactions such as a merger or acquisition, subject to appropriate safeguards.
We do not sell personal information as defined by U.S. state privacy laws, and we do not share it for cross-context behavioral advertising except as disclosed if our practices change with notice.
International transfers
We may process data in the United States and other countries where we or our subprocessors operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms. Contact hello@docsiv.com for more information or a copy of relevant safeguards.
Retention
We retain personal information for as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention varies by category (for example, billing records may be retained longer for tax obligations). Backups may persist for a limited period after deletion.
Security
We implement technical and organizational measures appropriate to the risk, including encryption in transit, access controls, monitoring, and vendor due diligence. No method of transmission or storage is fully secure; we encourage strong passwords and workspace permissions.
Your rights and choices
Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority.
To exercise rights, contact hello@docsiv.com. We may verify your request as permitted by law. Authorized agents may submit requests where applicable law allows.
California residents (CPRA): You may request to know, delete, and correct certain personal information and to opt out of sale/sharing if applicable. We do not discriminate for exercising privacy rights.
Links and third-party sites
Our Service may link to third-party websites. Their practices are governed by their own policies.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date. Material changes may require additional notice where required.
Contact
Questions: hello@docsiv.com
Postal: [Registered business address]