Document.Bot is built for local-first document work. This policy explains what account, licensing, billing, support, and optional online-service data is collected.
We only collect information that you voluntarily give us through email, product forms, or direct contact.
We use your information to respond to requests, provide the Service, process billing, and communicate relevant product or policy updates.
We do not sell or rent this information to anyone.
You may contact us to review, correct, delete, or raise concerns about personal data we hold.
We take precautions to protect information online and offline.
Sensitive information transmitted through the Service is encrypted in transit. Access to personally identifiable information is limited to personnel who need it to perform a specific job.
We do not store your full credit card information directly. Payment data is handled by a third-party payment processor, and we may keep card brand, last four digits, and expiration date to support billing workflows.
We use strictly necessary cookies and browser storage to keep you signed in and secure the Service.
Optional analytics cookies and storage are only used after you allow analytics, and you can turn analytics off again at any time below.
If you allow analytics, we record anonymous product step events, such as viewing or submitting the signup form, the outcome of an email verification or sign-in attempt, and clicking a download or web app button. Each step event only contains fixed values such as the page type, the step and a broad outcome category.
These step events use a random identifier stored in your browser. They are not linked to your account, email address or other devices, and they never include form contents, passwords, emails, names, document data, verification or sign-in tokens, or full page addresses.
The analytics providers enabled on this site are listed below. PostHog receives only these step events, together with the network information that every web request carries, such as your IP address and browser user agent. If Google Analytics or Microsoft Clarity is listed, their scripts also collect the standard device, browser, page and interaction data defined by those providers; the step-event limits above do not control that collection. Microsoft Clarity can record masked page interactions.
Browsers that send a Global Privacy Control signal are treated as having declined analytics.
If you decline or later turn analytics off, no analytics events are sent from this browser, the random identifier is deleted and analytics cookies are removed where the browser allows it.
This website may contain links to other sites. We are not responsible for the content or privacy practices of those sites.
This privacy policy may change from time to time. Updates will be posted on this page.
Last updated November 2, 2026