Privacy Policy

At DocsTray, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this Privacy Policy carefully.

Information We Collect

We collect information that you provide directly to us when using DocsTray:

• Account Information: Name, email address, password, and account preferences
• Client Data: Client names, email addresses, and document requests you create
• Documents: Files uploaded by you or your clients through the portal
• Billing Information: Payment method details (processed securely by Stripe)
• Usage Data: How you interact with DocsTray, including features used and time spent

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve DocsTray
• Process your transactions and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns to improve our service
• Protect against fraud and unauthorized access

Data Security

We take data security seriously. DocsTray implements industry-standard security measures to protect your information:

• 256-bit encryption for all documents at rest
• SSL/TLS encryption for all data in transit
• Regular security audits and vulnerability scanning
• Secure, role-based access controls
• Automatic virus scanning on all uploads

While we implement these security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your data.

Third-Party Services

DocsTray relies on trusted third-party services to power our platform:

• Supabase: Our primary database and authentication provider. Your account information and client data are stored securely with Supabase.
• Stripe: Processes all payments and subscription billing. We never see your full payment card details.
• Vercel: Hosts the DocsTray application and provides global content delivery and performance optimization.
• Resend: Handles email delivery for notifications, reminders, and password reset requests.

Each of these services complies with industry-standard security practices and data protection regulations. For more information, please review their respective privacy policies.

Your Rights

Depending on your location, you may have the following rights regarding your data:

• Access: Request a copy of the data we hold about you
• Correction: Request corrections to inaccurate data
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Request a machine-readable copy of your data
• Opt-out: Unsubscribe from marketing communications

To exercise any of these rights, please contact us using the information below.

Data Retention

We retain your account information for as long as your account is active. If you cancel your subscription, we will delete your data within 30 days unless legal obligations require longer retention. Client documents are deleted when you remove them or close your account.

Children's Privacy

DocsTray is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@docstray.com
• Address: 123 Bookkeeper Lane, Suite 100, Financial District, NY 10001

By using DocsTray, you acknowledge that you have read and understood this Privacy Policy.