Back to Home
DocSaathi

Privacy Policy

Last updated: August 2026

Note: This is a placeholder policy drafted in good faith. DocSaathi's operator should have it reviewed by a qualified legal professional before a wide public launch — especially because the service handles sensitive document categories such as medical, legal, and financial records.

1. What data we collect

Account information: when you sign up, we collect your email address, your name and country (asked once after signup), and authentication details. If you sign in with Google, we receive the basic profile information Google shares with us (name, email and profile picture).

Uploaded documents and images: the files you upload (PDFs and photos) and their full contents. These may contain sensitive personal information — including medical reports, legal notices, government forms, tax notices, and bank or loan documents. We process them solely to generate your simplified summary.

Usage data: how many documents you have summarized on a given day, so we can apply the free daily limit. Guest users are tracked with an anonymous device identifier stored in the browser.

Basic visit data: the pages visited, an anonymous browser and session identifier, and where the visit came from (for example a search engine, a link on another site, or direct). This is our own simple counter — we do not build advertising profiles, and we never sell or share browsing data.

2. Why we are allowed to process it (legal basis)

We rely on your consent for creating your account and for processing the documents you choose to upload — you give it by ticking the consent box at signup and by uploading a file, and you can withdraw it at any time (see your rights below). For paid Saathi Plus subscriptions we rely on performance of a contract — we need your account and billing details to give you the service you paid for.

3. How your documents are processed

When you upload a document, its content (extracted text for PDFs, or the image itself for photos) is sent to a third-party AI provider — the NVIDIA NIM API — to generate the simplified explanation. The AI provider processes this content transiently to produce a response.

Your document content is never used to train AI models, and it is never sold or shared with anyone for marketing or any other purpose. It is used only to produce the summary you asked for.

4. Cross-border transfers

Our AI provider's infrastructure and our cloud hosting are located outside India, so your document content and account data may be processed on servers in other countries (including the United States and the European Union). By uploading a document you consent to this transfer. We only use providers who apply industry-standard security and confidentiality protections, and the transfer happens purely to deliver the service to you.

5. How your data is stored

Your account data, uploaded files, and generated summaries are stored securely on our cloud backend. Files are kept in private storage and are accessible only through signed, expiring links tied to your account. Access is restricted by database-level rules so one user can never read another user's documents.

6. How long we keep it (retention)

Signed-in users: your documents, summaries and account data are kept until you delete them or delete your account. Deleting your account removes them immediately.

Guests (not signed in): files uploaded without an account are deleted automatically after 7 days, along with their records.

We may keep a minimal record of completed payments for as long as tax and accounting law requires, even after an account is deleted.

7. Your rights

Whether you are in India (under the Digital Personal Data Protection Act, 2023) or elsewhere (for example under the GDPR), you have the right to:

Access — ask for a copy of the personal data we hold about you. Your documents and summaries are also visible any time on the "My Documents" page.

Correction — ask us to fix inaccurate or incomplete data about you.

Erasure — delete your account and all your data yourself, at any time: open the profile menu (the circle with your initial, top right) and choose Delete My Account & Data. This permanently removes your profile, uploaded files, summaries and feedback. You can also email us and we will do it for you.

Withdraw consent — you can stop using the service and withdraw your consent at any time by deleting your account. Withdrawing consent does not affect processing that already happened.

Complain — you may raise a complaint with us at the address below, or with your data protection authority (in India, the Data Protection Board).

8. Payments

Paid subscriptions are processed by Dodo Payments. DocSaathi never sees or stores your card number, UPI details, or other payment credentials — those are handled entirely by Dodo Payments under their own privacy policy.

9. What we never do

We do not sell, rent, or trade your personal data or document contents to anyone. We do not use your documents for advertising or for training AI models.

10. Cookies and tracking

We use a small number of browser storage items strictly to keep you signed in, to remember your guest usage and language preference, and to count visits with an anonymous session identifier. We do not use third-party advertising or behavioural tracking, and no browsing data is sold or shared.

11. Data breach notification

We take security seriously. If a breach affects your personal data, we will notify affected users and the relevant authorities without undue delay, and tell you plainly what happened, what data was involved, and what to do next.

12. Children

DocSaathi is intended for people aged 18 and over. It is not directed at children, and we do not knowingly collect data from children. If you believe a child has used the service, contact us and we will delete the account and data.

13. Important disclaimer

DocSaathi provides simplified explanations of documents for informational purposes only. It is not a substitute for professional medical, legal, or financial advice. Always consult a qualified doctor, lawyer, or financial advisor before acting on anything important.

14. Grievance and data protection contact

For any privacy question, data rights request (access, correction, erasure, consent withdrawal) or complaint, email us at vellcoby114316@gmail.com. We aim to respond within 30 days.