Privacy policy

Version: October 28, 2026. Effective date: October 29, 2026.

Who we are and whose information this covers

Doculane is operated by Blop Digital LLC, 1881 Middle River Dr, Suite 701, Fort Lauderdale, FL 33305, United States. Our owner handles privacy questions and requests at info@doculane.app.

This policy covers visitors, account holders, team members and people sending documents through Doculane. We determine how to handle account, service administration and support information. For documents and related personal information processed for a business workspace, the business customer generally determines the purpose and authorized access, and we act on its instructions. The Data processing addendum describes that relationship. Paddle separately handles purchase information under its own Privacy Policy.

Information we handle

• Accounts and workspaces: name, email, organization and profile information, authentication identifiers, securely managed credentials, roles, invitations, settings and preferences.
• Documents and activity: uploaded files, filenames, file types and sizes, sender/contact details, messages, request checklists, delivery references, timestamps, notes, tags and workflow status. Content depends on what you and the workspace choose to provide.
• Security and technical information: session and verification records, IP addresses or derived security identifiers, device/browser information, authentication events, rate-limit records, diagnostic logs and deletion-job records.
• Optional integrations and AI: connection identity, authorization tokens, destinations and transfer status for Drive; AI activation choices, questions, relevant record metadata, responses, conversation history and usage accounting.
• Support and billing: correspondence and request-verification information; plan, subscription, transaction references, status and billing contact information supplied by Paddle. We do not receive complete card numbers or card security codes.

Information comes from you, workspace owners and members, external senders, your connected providers and service operations. A sender's information may therefore have been supplied by the business requesting documents.

How and why we use information

We use information to authenticate users, operate workspaces and permissions, receive and deliver documents, send requested notifications and reminders, provide enabled integrations, answer optional AI queries, manage subscriptions, respond to support and rights requests, prevent abuse, troubleshoot and meet legal obligations. Optional usage analytics help improve the product when enabled and permitted by your preferences.

Where a law requires a legal basis, we rely as applicable on performing a contract, complying with legal obligations, legitimate interests in operating and securing the service, or consent for optional processing where required. Accepting service terms is not blanket consent for every use of personal information. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use customer documents for advertising.

Who can receive information

Workspace information is available to the business receiving it and the members authorized through its roles. Notifications can disclose relevant sender, request or document metadata to their intended recipients. Only send information you are authorized to share and verify the receiving organization.

We use providers for hosting, database/authentication, file storage, security, transactional email, optional analytics and optional AI. See the provider list. They receive the information needed for their functions. We may disclose information to comply with valid legal requirements, protect rights and security, or complete a business transfer subject to applicable privacy obligations. We limit human access to service, authorized support, security and legal needs, with confidentiality safeguards.

Doculane is initially offered to United States customers. We and our providers may process information in the United States and other countries where they operate. We do not promise that all information remains in a single country. Any additional localization or international-transfer commitments require an applicable written agreement and supported configuration.

Google Drive

Google sign-in provides basic account identity. Connecting Drive is a separate, optional authorization using limited permissions for the integration. We use connection credentials and folder/file identifiers to copy selected workspace files into the configured Drive destinations and show transfer status. You can pause or disconnect the integration and revoke access through your Google account.

Already exported copies remain in Drive unless deleted there. Disconnecting does not erase them, and an operation already in progress may finish. Google also processes information under your relationship with Google. Our use of information received from Google Workspace APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use that information for advertising or to train generalized AI models.

Optional AI assistance

AI requires the user's activation before their first query. OpenAI processes your question, relevant conversation context and bounded workspace metadata needed to answer it, such as contact details, filenames and request status. The current assistant does not retrieve file contents or perform OCR. Do not type information you are not authorized to disclose. Outputs may be inaccurate.

You can select Turn off AI data sharing for my account in Usage. An owner or administrator can select Pause AI for this workspace. These controls prevent new assistant requests for the affected account/workspace. They do not turn off document storage, email or other processing necessary for Doculane, recall a request already underway, or erase stored history. You can separately delete your chats.

The API is configured not to store Responses for later retrieval at OpenAI. This setting does not mean zero provider retention: provider security/abuse records and contractual retention rules may still apply. Our app history and usage records have the separate retention described below.

Cookies and local storage

We use cookies and similar browser storage for authentication, security, preferences and upload recovery state. Recovery identifiers do not necessarily preserve the selected file bytes; you may need to select files again after reloading.

When analytics is enabled, PostHog operates only after the required analytics choice. The analytics implementation excludes document contents, disables session recording and automatic interaction capture, and limits reported events and properties. You can change analytics preferences using the available preferences control. Browser settings can also block storage, although essential features may stop working. Turning off AI and refusing analytics are separate choices.

Retention and deletion

We keep workspace information while needed to provide the service under the customer's instructions. Authorized users can delete files, and an authorized owner can request Delete all files in Settings → Data & privacy. That action removes files and pending uploads, not the account, contacts, settings or subscription. It clears recent workspace searches; limited delivery history may remain. File cleanup runs asynchronously and its status is shown in Settings. Completed means removed from active service, not instant erasure of backups or outside copies.

For full account/workspace closure and deletion of remaining customer information, email info@doculane.app. We verify the requester's identity and authority, coordinate subscription cancellation, and remove workspace content from active systems as part of closure. An individual team member cannot direct deletion of an entire business workspace without authority. Where we act for a business customer, we route requests about its records to that business and assist it as required.

AI conversations become eligible for cleanup after 30 days of inactivity; execution text after 30 days and usage accounting after 90 days. Cleanup runs when the assistant is used, so these are eligibility periods, not guarantees of erasure at an exact time. Users may also delete conversations sooner.

Necessary billing, tax, security, dispute and request-handling records may be retained for their specific purpose and applicable legal period. Minimal deletion markers support cleanup, accountability and preventing restored data from becoming active again. We restrict these records and remove them when no longer needed; this does not justify indefinite retention of customer documents.

Backups and provider residual records expire separately according to the relevant retention cycles. We do not promise immediate erasure from all copies. Deleted information must remain unavailable for ordinary use and deletion instructions must be respected if data is restored. We cannot erase downloads held by others, received emails or copies already exported to Drive.

Your choices, requests and security

You can update available account/workspace settings, manage team access if authorized, change optional processing preferences, download available files and request deletion. Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, opt out of certain uses, or appeal a request decision. Email info@doculane.app; include your account email and the request, not sensitive documents unless we provide a secure verification method. We respond within the period required by applicable law and explain applicable limitations. Authorized-agent requests are subject to appropriate authority checks. We do not discriminate for exercising applicable privacy rights.

We use access controls, private storage, protected connections and other technical and organizational measures. No service is completely secure, and we do not represent that Doculane holds a certification or provides guaranteed backup/recovery unless separately agreed. Report suspected misuse or exposure to info@doculane.app.

The service is intended for adults using it for business, not for children under 13. Contact us if you believe a child has supplied information contrary to this policy. We will investigate and take appropriate action.

Changes and contact

We will identify updated versions and notify you of material changes by email or in the product as appropriate. New purposes requiring consent will be presented before that processing starts. Contact: Owner, Blop Digital LLC, at info@doculane.app or the address at the beginning of this policy.