Privacy Policy

This Privacy Policy explains how Docubrew ("we," "us," or "our") collects, uses, and protects information when you use our website, cloud conversion service, and desktop application (collectively, the "Service").

Our approach is simple: we exist to convert your documents, not to collect them. We collect the minimum information needed to operate the Service, we automatically delete files you upload to the cloud within 24 hours, and files you process with the desktop application never leave your computer in the first place.

By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • your email address;

  • authentication credentials (your password is stored in hashed form only — we never see or store your plaintext password); and

  • your subscription plan and account settings.

1.2 Billing Information

When you purchase a subscription, payment is handled by our third-party payment processor. We receive limited billing information such as your subscription status, plan, transaction history, and the last four digits and brand of your payment card for reference. We do not collect or store your full payment card number.

1.3 Documents You Upload (Cloud Service)

When you use the Cloud Service, we temporarily process the PDF files you upload and the converted output generated from them, solely to perform the conversion you requested.

Uploaded files and converted output are automatically deleted from our servers within 24 hours of processing. We do not read, mine, analyze, or use the contents of your documents for any purpose other than performing your requested conversion. We do not use your documents to train any artificial intelligence or machine learning system, and no AI model processes your documents.

1.4 Documents Processed with the Desktop Application

The desktop application performs conversions locally on your device. Files you convert with the desktop application, and their converted output, are stored only on your own computer and are not transmitted to our servers. The desktop application does not send automated usage reports, analytics, or telemetry from your device.

The desktop application communicates with our servers only when you sign in, so that we can verify your account and subscription status.

1.5 Usage and Quota Information

To operate usage allowances fairly across account types, we record usage metrics such as the number of pages converted and conversion timestamps for your account. Usage metrics describe how much you used the Service — they do not include the contents of your documents.

For anonymous use of the Cloud Service, we use network identifiers such as your IP address to enforce free usage allowances and prevent abuse.

For anonymous use of the desktop application, the free usage allowance is tracked locally on your device and is not transmitted to us.

1.6 Website Analytics

We use privacy-focused analytics to understand how visitors use our website (such as pages visited, referral source, browser type, and approximate location derived from IP address). This helps us improve the Service.

Our website may also include measurement technologies (such as pixels) from advertising platforms whose advertisements brought you to our website. These technologies allow the advertising platform to measure the effectiveness of its advertisements, and may involve the platform receiving information about your visit (such as the pages you viewed and actions such as sign-up) in accordance with that platform's own privacy policy. These technologies are used for advertising measurement on our website only — they are never present in the Cloud Service conversion workflow or the desktop application, and they never have access to your documents.

1.7 Support Communications

If you contact us for support, we collect the information you provide in your message, including your email address and the details of your request.

1.8 Documents You Choose to Send Us (Issue Reports)

If you report a conversion issue, you may choose — entirely at your option — to send us a copy of the affected document by email to help us investigate. We treat such documents as confidential. They are used solely to investigate and resolve the reported issue and to improve the parsing capability involved, are not stored on our production servers, and are deleted after our investigation is complete. They are never used for advertising, never sold, and never used to train any AI system.

2. How We Use Information

We use the information described above to:

  • provide, operate, and maintain the Service, including performing conversions;

  • create and manage your account and authenticate your access;

  • process payments, manage subscriptions, and enforce usage allowances;

  • respond to support requests and investigate reported issues;

  • send transactional communications, such as account, billing, security, and service notices;

  • send product updates or marketing communications, where permitted — you can unsubscribe at any time;

  • monitor, protect, and improve the Service, including preventing fraud and abuse; and

  • comply with legal obligations.

We do not sell your personal information. We do not use the contents of your documents for advertising, profiling, or any purpose beyond performing the conversion or investigation you requested.

3. Legal Bases for Processing

Where applicable data protection law requires a legal basis, we process personal information: (a) to perform our contract with you (providing the Service); (b) for our legitimate interests (such as securing and improving the Service and preventing abuse); (c) with your consent (such as optional marketing emails or documents you choose to send us); and (d) to comply with legal obligations.

4. How We Share Information

Account authentication and subscription management run on our own infrastructure — your account data is not handed to outside identity or billing platforms. We share information only with the following categories of service providers, and only to the extent necessary to operate the Service:

  • Payment processor — to process payments securely; your payment card details are provided by you directly to the payment processor;

  • Cloud infrastructure and hosting providers — to host the website and Cloud Service and temporarily store files during processing;

  • Email service provider — to deliver transactional and, where permitted, marketing emails;

  • Analytics provider — to measure website usage as described in Section 1.6; and

  • Advertising platforms — solely for advertising measurement as described in Section 1.6.

Each provider is bound by contractual obligations appropriate to the services it performs. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case this Privacy Policy will continue to apply to your information until amended).

5. Data Retention

  • Cloud-uploaded files and converted output: deleted automatically within 24 hours of processing.

  • Desktop application files: stored only on your device, under your control; we never receive them.

  • Documents sent with issue reports: deleted after our investigation is complete.

  • Account information: retained while your account is active and for a reasonable period afterward as needed for legal, billing, and audit purposes.

  • Billing records: retained as required by tax and accounting law.

  • Usage metrics: retained as needed to operate allowances and analyze aggregate service usage.

When you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as resolving disputes and enforcing agreements.

6. Data Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit, hashed credential storage, and access controls. Files processed by the desktop application benefit from the strongest protection available: they never leave your device.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for the security of files stored on your own devices.

7. International Data Transfers

We operate globally and our service providers may process information in countries other than your own, including countries that may have different data protection laws. Where required, we take appropriate steps to ensure your information receives adequate protection consistent with this Privacy Policy and applicable law.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at support@docubrew.com. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on a request.

You may unsubscribe from marketing emails at any time using the link in the email. Transactional emails (such as billing and security notices) are part of operating your account and will continue while you have an account.

Because cloud-uploaded documents are deleted automatically within 24 hours, requests concerning uploaded document contents can typically only be fulfilled within that window, if at all.

9. Cookies and Similar Technologies

We use cookies and similar technologies that are necessary for the Service to function (such as keeping you signed in) and, as described in Section 1.6, to measure website usage and advertising effectiveness. You can control cookies through your browser settings, though disabling necessary cookies may prevent parts of the Service from working.

10. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact us and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on our website with a revised "Last Updated" date and, where appropriate, provide additional notice such as email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@docubrew.com