Privacy policy
Last updated August 2026
Health questions are among the most sensitive things a person can type. This policy explains what DataDoc collects, what it deliberately avoids collecting, and how you stay in control.
What we collect
- Account data: your email address and authentication identifiers, plus subscription status if you subscribe.
- Your questions and reports: when you are signed in, your chats, triage summaries, and generated reports are saved to your account so you can return to them.
- Attachments: documents and images you attach are read in your browser to extract text; the extracted text is what gets sent for analysis.
- Usage counters: the number of evidence reports you generate in a billing period, to apply the free allowance.
- Basic technical data: logs needed to keep the service running and prevent abuse.
Identifier scrubbing before analysis
Before your text leaves your device for analysis, DataDoc runs a redaction pass in your browser that removes direct identifiers it detects — names, emails, phone numbers, and similar patterns. This reduces exposure, but automated redaction is never perfect. Please avoid typing names, addresses, or record numbers in the first place.
Guest use
If you are not signed in, your chat history is stored only in your own browser and is not written to our database. Clearing your browser storage deletes it permanently.
Who we share data with
We use a small number of processors strictly to deliver the product: cloud hosting and database, an AI model provider that generates answers from your submitted text, a machine translation service when you use a non-English language, and a payment processor that handles card details directly (we never see or store your card number).
We do not sell your data, and we do not use your health questions for advertising.
Retention and deletion
Saved chats and reports stay in your account until you delete them. You can delete any individual conversation from the history sidebar, and you can request full account deletion at any time — we remove your account data and saved content.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us to exercise them; we will not restrict your service for making a request.
Security
Data is encrypted in transit and at rest, and access to your saved content is restricted to your authenticated account at the database level. No system is perfectly secure — please use a strong, unique password.
Children
DataDoc is not intended for anyone under 18, and we do not knowingly collect their data.
Changes and contact
We will update the date above when this policy changes and notify you of material changes. For any privacy question or request, contact us through the address listed in our terms of service.