Privacy Policy

DocuFlint, No 5 Road 10, Odo Ona Elewe, Ibadan, Oyo State, Nigeria, is the data controller for personal data processed through DocuFlint. This policy explains what we collect, why, and your rights.

Your files

• PDF and image tools (Merge, Split, Compress, Resize & Convert) process files entirely in your browser. These files are never uploaded to us.
• Photo Cleanup sends the photo and instruction you choose to our AI processing provider solely to produce your result. We don't store the photo after processing and it is not used to train models.
• Ask PDF sends your PDF, questions and the current conversation to our AI provider to answer your questions. DocuFlint does not save your PDF or conversation; they are cleared when you leave or replace the document.
• We never sell your files or their contents.

Data we collect and why

• Account data (email, sign-in details, and name/avatar if you sign in with Google or Apple) — to create and run your account. Legal basis: contract.
• Plan and usage data (subscription status, plan, tool-use counts) — to apply plan limits and prevent abuse. Legal basis: contract and legitimate interests.
• Technical data (IP address, browser and device type, error logs) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
• Support messages — to answer you. Legal basis: contract and legitimate interests.

Who we share data with

• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, subscription management, tax compliance and invoicing. Paddle handles your payment details directly; we never see full card numbers.
• Service providers that host the Service, provide authentication and email, and run AI processing for Ask PDF and Photo Cleanup.
• Professional advisers (legal, accounting) where needed, and authorities where required by law.

International transfers

Our providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses to protect it.

Cookies and local storage

We use essential storage only: to keep you signed in and to count free daily tasks on your device, and to remember your first-visit registration offer. We don't use analytics or advertising cookies. You can clear this storage in your browser settings, which will sign you out.

Retention

Account and usage data are kept while your account is active and deleted when you delete your account (available on your account page). Billing records held by Paddle are kept as required by law. Logs are kept for up to 30 days.

Security

We use encryption in transit, access controls and least-privilege permissions to protect your data.

Your rights

Under GDPR/UK GDPR you can access, correct, delete, restrict or port your data, object to processing, and withdraw consent; we respond within one month. You can also complain to your local data protection authority. California residents have the right to know, delete and correct personal information; we do not sell or share personal information for cross-context advertising.

Contact

Privacy requests: legal@docuflint.com.