Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information — your email address and authentication details, managed for us by Supabase, our authentication and account-data provider.
• Documents and content you submit — the files and text you choose to work with in the workspace, and the specific text sent to an AI feature when you use it.
• Billing information — if you subscribe to a paid plan, our payment provider Paddle collects and processes the billing details needed to complete your purchase (see Section 4). We don't collect or store your full payment card details ourselves.
• Usage information — basic technical data needed to operate the Service, such as your daily AI action count (used to enforce plan allowances) and standard web server logs.

2. How We Use Information

We use the information above to:

• Create and secure your account, and keep you signed in;
• Provide the features you request, including sending relevant document text to our AI provider to generate a result;
• Enforce plan-based daily usage allowances;
• Process subscriptions and keep your plan and billing status in sync with our payment provider; and
• Maintain, secure, and improve the Service, and respond to support requests.

3. How Documents Are Processed

When you open a PDF in the workspace, text extraction happens locally in your browser. When you use an AI feature (such as summarize, ask, extract, rewrite, humanize, translate, or compare), the relevant extracted text — not your original file — is sent to our servers and then to our AI provider, OpenAI, solely to generate the result you requested. We do not use the content of your documents to train AI models, and we do not store your uploaded documents on our servers beyond what's needed to process your request.

Some AI features, such as Humanize, also let you type or paste text directly instead of using an extracted document. Text you enter this way is sent to our servers and then to our AI provider, OpenAI, in the same way extracted document text is, solely to generate the result you requested. We do not store text entered this way on our servers beyond what's needed to process your request.

Some file tools shown on our site are still being rolled out and, at this time, don't process files at all — those are previews only.

4. Service Providers We Use

DocuMint AI relies on the following service providers to operate:

• Supabase — authentication and account data storage.
• OpenAI — processes document text to generate AI-powered results, under OpenAI's own API data-use terms.
• Paddle — our reseller and Merchant of Record for all paid subscriptions; Paddle processes payment and billing information on our behalf. See our Terms for more on Paddle's role.
• Vercel — hosts and serves the DocuMint AI application, and provides Vercel Web Analytics, which we use to understand aggregate website usage such as page visits and referral information. This analytics data is not tied to your account and does not include the content of any document or text you submit.
• PostHog — our product analytics provider. We send PostHog a limited set of interaction and event information (for example, that a sign-up completed, that a particular AI tool was started or finished, or that checkout was started) so we can understand feature usage and conversion behavior. Our implementation is configured not to send document contents, pasted text, prompts, AI-generated outputs, filenames, or your email address as event data, and we do not use PostHog to record your screen or session.

These providers only receive the information necessary for the service they provide to us, and each operates under its own privacy and security practices.

5. Cookies & Sessions

We use essential cookies, set by our authentication provider Supabase, to keep you signed in and to keep your session secure. We don't use these cookies for advertising or cross-site tracking. Your browser may also use local storage for small, non-essential conveniences (such as remembering an in-progress UI preference). Our analytics provider, PostHog, may also store a first-party cookie or local storage entry to distinguish anonymous visits; this is not used for advertising and is not linked to your account.

6. Security

The Service is served over HTTPS, so data sent between your browser and our servers is encrypted in transit. Our service providers apply their own industry-standard security practices to the data they process on our behalf. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

7. International Data Processing

Some of the service providers listed above operate in countries other than your own, including the United States and the United Kingdom. By using the Service, you understand that your information may be processed in those countries as described in this Policy.

8. Your Rights & Account/Data Deletion

Depending on applicable law in your location, you may have rights to access, correct, export, or delete your personal information. To exercise any of these rights, or to request deletion of your account or associated data, contact us at saadalihashmi7777@gmail.com. We'll respond in line with applicable law. Note that some information (for example, billing records held by Paddle) may need to be retained separately to meet legal or accounting obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the 'Last updated' date above.

10. Contact

Questions about this Privacy Policy? Contact us at saadalihashmi7777@gmail.com, or visit our Contact & Support page.