Privacy Policy
Last updated: March 4, 2026
1. Introduction
DocuHelper AI ("Company", "we", "our", or "us") operates the Service. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use the Service and the choices you have associated with that data.
2. Information We Collect
Account Information
- Email address
- Full name
- Account creation date
- Subscription plan and billing information
Documents & Form Data
- Documents you upload (PDFs, images, etc.)
- Data extracted from those documents by our AI
- Form completion information
- Chat history with the AI assistant
Usage Data
- IP address
- Browser type and version
- Pages visited and time spent
- Referring URL
- Device information
3. Data Security & Encryption
Your documents are transmitted and stored with 256-bit encryption (AES-256). We implement industry-standard security measures including:
- End-to-end encryption for sensitive data
- Secure authentication with password hashing
- Regular security audits and penetration testing
- Compliance with OWASP Top 10 security standards
- Data backups with disaster recovery procedures
4. HIPAA Compliance (Medical Information)
Important for Healthcare Users: DocuHelper AI is designed to handle Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA). However:
- We do NOT provide Business Associate Agreements (BAAs) by default
- Healthcare providers must contact us to enable HIPAA-compliant features
- Only use this Service for non-regulated healthcare if you are an individual patient
- Covered Entities and Business Associates must execute a BAA before submitting PHI
5. Use of Your Information
We use collected information for:
- Providing and improving the Service
- Processing transactions and sending related information
- Sending marketing communications (with your consent)
- Responding to your inquiries and customer support
- Detecting and preventing fraud or abuse
- Analytics and understanding user behavior
- AI model training and improvement (only with opt-in)
6. Data Retention
- Active Accounts: Data retained for duration of subscription
- Deleted Accounts: Data retained 30 days for compliance, then permanently deleted
- Billing Records: Retained 7 years for tax/legal compliance
- Support Logs: Retained 1 year
- You may request permanent deletion anytime
7. Third-Party Sharing
We do NOT sell your data. We may share information only with:
- Service providers (hosting, payment processing, analytics)
- Legal authorities when required by law
- Your consent (explicitly requested)
8. Third-Party Services
DocuHelper AI uses the following third-party services:
- Stripe: Payment processing - see Stripe Privacy Policy
- Google Cloud: Hosting and AI services - see Google Privacy Policy
- Analytics: Usage analytics - no PII shared
9. User Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Export your data in a standard format
- Opt-out: Stop receiving marketing communications
10. CCPA (California Privacy Rights)
If you are a California resident, you have the right to know what personal information is collected and how it's used. Contact us for more information.
11. GDPR (European Residents)
If you are in the EU/EEA, we comply with GDPR regulations. Your data is processed lawfully and you have rights regarding your personal data. Contact us for our Data Processing Agreement.
12. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware a child has provided us with personal information, we will delete such information promptly.
13. Contact & Data Requests
For privacy questions, data access requests, or to exercise your rights, contact us through the contact page. We will respond to requests within 30 days.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Your continued use of the Service constitutes acceptance of any changes.