Privacy Policy

Last updated: January 2, 2026

DocSentinel Limited ("DocSentinel," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services.

1. Information We Collect

1.1 Account Information

Name, email address, organization name, and billing information (processed by secure payment providers).

1.2 Customer Data

Documents you upload for processing. This often includes extracted data and validation results.

1.3 Usage Data

Log data such as IP address, access times, and feature usage to improve our service security and performance.

2. How We Use Your Information

Purpose	Legal Basis (GDPR)
Provide Services	Contract Performance
Process Documents	Contract Performance
Notifications	Legitimate Interest
Legal Compliance	Legal Obligation

3. Data Storage & Security

EEA Data Residency: All data is processed and stored within the EEA (Belgium, Germany).
Encryption: Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
Access Controls: Strict role-based access controls and audit logging.
No Training: Your data is never used to train our AI models.

4. Data Sharing (Sub-processors)

We share data only with authorized infrastructure providers:

Provider	Purpose	Location
Google Cloud	Infrastructure	EU
Supabase	Database	EU
Vertex AI	AI Processing	EU

5. Your Rights (GDPR)

You have the right to access, rectify, erase ("right to be forgotten"), restrict processing, and port your data. Contact privacy@docsentinel.io to exercise these rights.

6. Data Retention

Customer data is retained for the duration of the subscription + 30 days. You may export your data upon termination.

7. Contact Us

Data Protection Officer: dpo@docsentinel.io
General Privacy: privacy@docsentinel.io

DocSentinel Limited is operated from Dublin, Ireland.