Privacy

Last updated: June 9, 2026.

Your documents are never stored

When you upload a PDF, it is analyzed in memory on our server. The bytes are written only to a private scratch file that is deleted before the analysis request finishes, even when the analysis fails. Your document is never written to persistent storage, never logged, and never sent to a third party. Our test suite asserts this behavior on every change.

What we keep

We keep the findings derived from your document so you can come back to your report: file hashes, metadata fields such as dates and software names, signature status, and classifications. We keep these for 7 days, tied to your report link, and then delete them on a schedule. Findings contain no document content.

Payments

Payments are handled by Stripe. We never see your card number. For a one-time report unlock we store the Stripe session id with your report. For a Pro subscription we store your license key and subscription id. We do not require names, emails, or accounts.

Analytics and logs

We use Plausible, a privacy-focused analytics tool that uses no cookies and collects no personal data. Our server logs contain no document content and no file names. We record upload counts per network address for one day to enforce the free-tier limit.

Contact

Questions about this policy: privacy@docverdict.com.