Privacy Policy

All Doks Privacy Policy Effective date: July 21, 2026 Published at: https://alldoks.com/privacy 1. WHO WE ARE (DATA CONTROLLER) All Doks, currently operated by its individual developer based in India, provides the All Doks mobile application and website (together, the "Service"). If All Doks is later operated by a registered company or assigns operations to another entity, we will update this Policy and the published URL above. Contact: support@alldoks.com 2. INTRODUCTION This Privacy Policy explains what personal information we collect, how we use it, who we share it with, retention, your rights, and how to contact us. By creating an account or using the Service, you agree to this Policy. If you do not agree, do not use the Service. 3. INFORMATION WE COLLECT 3.1 Account information When you register or sign in, we collect information such as your email address, display name, authentication identifiers, and sign-in method (for example, email/password or Google OAuth through our authentication provider). 3.2 Content you provide We store content you upload or create, including documents, file metadata (workspace, circle, person, and case associations), and AI conversation history tied to your account. 3.3 Usage, billing, and diagnostic information We collect information about how you use the Service, including AI query counts and token usage against your plan or purchased AI allowance, sync actions, feature interactions, and error/crash reports (when error monitoring is enabled). Support messages sent from Settings may include your user ID, app version, and device platform. 3.4 Cookies and similar technologies (web) Our website may use cookies or local storage for session management and preferences. Mobile apps use secure on-device storage for session tokens. 4. HOW WE USE INFORMATION We use information to: • Provide, operate, and maintain the Service • Authenticate you and enforce access controls within your circles and workspaces • Process, index, and retrieve documents when you search or ask questions • Generate AI-assisted answers based on your authorized document context • Enforce plan and usage limits (requests, tokens, AI allowance, and feature scope) • Respond to support requests and improve reliability • Detect abuse, fraud, and security incidents • Comply with legal obligations 5. AI PROCESSING When you use AI features, relevant text from your documents may be embedded, retrieved, and sent to our AI infrastructure to generate a response. • Processing is limited to content you have access to within the Service. • We do not use your document content to train public foundation models. • AI providers process data on our behalf under contractual terms and only for delivering the Service. • AI is used to find and summarize content from your documents, not to provide professional advice. • AI-generated responses are provided for informational purposes only and should not be relied upon as any kind of advice. Always verify important information against your original documents. 6. SERVICE PLANS, PURCHASES, AND USAGE LIMITS All Doks may offer different service tiers, usage plans, one-time purchases, subscriptions, enterprise offerings, promotional access, or other commercial models. Available plans, pricing, and features may change over time and will be presented within the Service before any purchase or commitment is made. Your access to certain features may depend on your selected plan, purchased AI allowance, promotional entitlements, or other usage rights associated with your account. To maintain the reliability, security, and fair use of the Service, All Doks may apply reasonable usage limits, including but not limited to: AI requests or AI processing allowance Token or compute usage Number or size of uploaded documents Storage capacity Sync frequency File processing limits Search and AI query limits Sharing, collaboration, or workspace limits API or system rate limits Other technical or operational limits necessary to ensure service availability and prevent abuse These limits may vary between free, paid, enterprise, promotional, or testing plans and may be updated from time to time as the Service evolves. During pre-release testing, certain features, purchases, usage limits, or pricing may not yet be finalized. Temporary testing limits or promotional access may apply. 7. HOW WE SHARE INFORMATION We do not sell your personal information. We share information only as follows: 7.1 Service providers (sub-processors) We use trusted third parties to operate the Service, including: • Supabase — authentication, database, and file storage • Microsoft Azure OpenAI and other trusted AI service providers (if used in the future) — embeddings and language-model inference for AI features • Sentry — error monitoring and crash diagnostics (when enabled) • Google — OAuth sign-in (if you choose that method) • Cloud hosting providers (for example, Render) — application hosting These providers access information only to perform services for us under appropriate contractual and security obligations. 7.2 Within your organization (circles) Documents, cases, persons, and conversations are scoped to circles and workspaces you configure. Other members of a shared circle may access content according to their role and permissions. 7.3 Legal requirements We may disclose information if required by applicable law, regulation, legal process, or to protect rights, safety, and security. 8. DATA RETENTION We retain information while your account is active and as needed to provide the Service. • Deleted documents and cases may remain in Trash until you permanently delete them, or until automatic Trash purge removes documents that have been in Trash for more than 24 hours. • Standard account deletion enters a 15-day grace period during which you may request restoration by contacting support (or signing in again to request restoration). After that period, we delete or de-identify account data from active systems, subject to limited backup retention and legal holds. • You may also choose immediate permanent deletion in Settings. That option permanently deletes your account and personal data as soon as processing completes and cannot be undone. • Security, authentication, and audit logs used to protect the Service, investigate incidents, and maintain system integrity may be retained for a limited period (generally up to 90 days) or longer where reasonably necessary for security, fraud prevention, legal compliance, or dispute resolution. 9. SECURITY We use measures designed to protect your information, including encrypted connections (HTTPS/TLS), authenticated API access, and database row-level security (RLS) policies that restrict access by user and circle membership. No method of transmission or storage is completely secure. You are responsible for safeguarding your account credentials. 10. YOUR RIGHTS AND CHOICES 10.1 India (Digital Personal Data Protection Act, 2023) If you are in India, you may have rights to access, correct, erase, and grievance redressal regarding your personal data, subject to applicable law. Contact support@alldoks.com with subject line "Privacy Request — India". 10.2 Other regions Depending on your location (including the EU/EEA, UK, or certain US states), you may have additional rights to access, correct, delete, or export personal information, restrict processing, or object to certain processing. You can: • Manage content and delete items through in-app tools and Trash • Request account deletion in Settings • Contact support@alldoks.com for privacy requests We respond to verified requests within a reasonable time as required by applicable law. 11. INTERNATIONAL TRANSFERS If you access the Service from outside India, your information may be transferred to and processed in India, the United States, the European Union, or other countries where our providers operate. We implement appropriate safeguards where required by law. 12. WHO MAY USE THE SERVICE The Service is intended for users aged 16 and older. Users under the age of 18 should use the Service only where permitted by applicable law and, where required, with the involvement or consent of a parent or legal guardian. Adult users and eligible older teenagers may store and manage documents relating to themselves and, where they have the legal authority to do so, documents relating to members of their household, including minors. 13. CHANGES TO THIS POLICY We may update this Policy from time to time. We will post updates at https://alldoks.com/privacy and in the app, and update the effective date. Material changes may be communicated through the Service or by email where appropriate. 14. CONTACT US support@alldoks.com Subject line: Privacy Request