DocYuso, Inc. (“DocYuso,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our secure document delivery platform and related services (the “Service”).
1. Overview
DocYuso helps businesses upload documents, merge them into PDF packages, and send secure download links to recipients with delivery tracking. To provide this Service, we process information about account holders (“you” or “customers”) and the recipients you send documents to.
This policy applies to information collected through our website, web application, and related communications. It does not apply to third-party websites or services that may link to or integrate with DocYuso.
2. Information We Collect
Information you provide
- Account information: Name, email address, organization name, password (stored in hashed form), and billing details for paid plans
- Uploaded documents: Files you upload to create packages, including metadata such as file names and upload timestamps
- Recipient information: Email addresses and names of people you send packages to
- Communications: Messages you send to our support team and feedback you provide
Information collected automatically
- Usage data: Pages viewed, features used, actions taken within the dashboard, and referral sources
- Device and log data: IP address, browser type, operating system, device identifiers, and access timestamps
- Delivery events: When packages are sent, links are opened, email verification is completed, and downloads occur
Information from third parties
- Payment processors: Billing status and transaction identifiers (we do not store full payment card numbers)
- Authentication providers: If you sign in through a third-party identity provider, we may receive basic profile information as permitted by that provider
3. How We Use Information
We use collected information to:
- Provide, operate, and maintain the Service
- Process and deliver document packages to your designated recipients
- Send transactional emails (delivery notifications, verification codes, account alerts)
- Display delivery and download status in your dashboard
- Process payments and manage subscriptions
- Respond to support requests and communicate about the Service
- Monitor, detect, and prevent fraud, abuse, and security incidents
- Improve and develop new features
- Comply with legal obligations
We do not sell your personal information. We do not use uploaded document content for advertising purposes or to train machine learning models.
4. Document and Recipient Data; Our Role
When you upload documents and send packages through DocYuso:
- Your documents are stored securely to enable delivery, download, and tracking. You control who receives access via unique links and email verification.
- Recipient data (such as email addresses) is used solely to deliver packages, verify identity, and provide you with delivery status. Recipients who do not have DocYuso accounts are not marketed to unless they separately opt in.
- Access controls: Only you (and authorized team members on your account) can view your dashboard and package details. Recipients can access only the packages sent to them, subject to verification requirements you configure.
Controller and processor roles. For account, billing, and usage data, DocYuso acts as a data controller (or “business,” under CCPA terminology). For the content of documents you upload and send — and any personal data contained within them — DocYuso acts as a data processor (or “service provider”) on your behalf; you remain the controller of that content. You are responsible for having a lawful basis to collect, upload, and share document content and recipient information with us, and for obtaining any consents required to send documents to your recipients. See Section 7 of our Terms of Service.
5. Regulated Data (HIPAA, GLBA, and Similar Frameworks)
DocYuso does not enter into HIPAA Business Associate Agreements or equivalent regulatory agreements unless separately executed in writing between you and DocYuso. If your documents contain protected health information, nonpublic personal financial information, or other data subject to a sector-specific regulatory framework, you are responsible for determining whether use of the Service is appropriate and for obtaining any required agreement from us before transmitting that data. Absent a signed agreement, do not use the Service to transmit such data. See Section 7 of our Terms of Service.
6. Data Retention and Deletion
While your account is active. We retain account data, uploaded documents, and package data for as long as your account is active and in accordance with your plan’s file retention period, as described on our Pricing page.
After cancellation or termination. When your subscription is canceled or terminated — whether by you, due to non-payment, or for cause — the following timeline applies, consistent with Section 15 of our Terms of Service:
- For 14 days following the cancellation date, your account is in a read-only export window: you (and authorized users) may log in to view package history and export or download your documents, but cannot send new packages.
- After the 14-day export window, your account moves to a suspended, billing-only state. Login is available only to view billing status and reactivate; access to package history and documents is disabled.
- No later than 30 days after your cancellation date — regardless of when suspension began — we permanently delete your uploaded source files, generated packages, and associated metadata from our active systems. Recipient download links for packages you already sent remain available under their own expiry settings until this deletion occurs.
- Encrypted backups containing this data are purged in the ordinary course of our backup rotation shortly after the 30-day mark.
- If you reactivate your subscription before the 30-day mark, your account and any not-yet-deleted content are restored; reactivation after deletion does not recover deleted content.
Other data. Log and usage data is typically retained for a limited period for security, analytics, and troubleshooting. Billing history, account records, and audit/fraud-prevention logs may be retained beyond the timelines above where required for legal, tax, or dispute-resolution purposes; these retained records do not include the underlying document content.
Requesting earlier deletion. You may request deletion of your account and documents before the automatic timeline above by contacting support@docyuso.com, subject to any records we are legally required to retain.
7. How We Share Information
We may share information in the following circumstances:
- Service providers: With vendors who help us operate the Service (hosting, email delivery, payment processing, analytics, customer support), bound by contractual obligations to protect data and use it only on our instructions
- Legal requirements: When required by law, regulation, legal process, or government request, or to protect the rights, property, or safety of DocYuso, our users, or others
- Business transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations
- With your consent: When you direct us to share information or enable integrations with third-party services
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
8. Security
We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, recipient email verification, and monitoring.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.
If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.
9. Your Rights and Choices
Depending on your location, you may have rights regarding your personal information:
All users
- Access and correction: You may access and update account information through your account settings or by contacting us
- Deletion: You may request deletion of your account and associated data, subject to the timelines in Section 6 and legal retention requirements
- Marketing opt-out: You may opt out of promotional emails by using the unsubscribe link or contacting us (transactional emails related to the Service will still be sent)
California residents (CCPA/CPRA)
If you are a California resident, you may have additional rights under the California Consumer Privacy Act, including:
- The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information)
- The right to request deletion of personal information, subject to exceptions
- The right to correct inaccurate personal information
- The right to opt out of the sale or sharing of personal information (not applicable — we do not sell or share for cross-context behavioral advertising)
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, email support@docyuso.com. We will verify your request before responding. You may designate an authorized agent to submit requests on your behalf.
Other jurisdictions
If you are located in the European Economic Area, United Kingdom, or other regions with data protection laws, you may have additional rights (such as data portability or objection to processing). Contact us to exercise applicable rights.
10. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Keep you signed in and maintain session state
- Remember your preferences
- Understand how the Service is used and improve performance
- Detect and prevent abuse
You can control cookies through your browser settings. Disabling certain cookies may limit functionality of the Service.
We may use analytics tools that collect usage information. Where required, we will obtain consent before using non-essential cookies.
11. Children’s Privacy
The Service is intended for business use by individuals 18 years of age or older, consistent with our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, contact us and we will take steps to delete it.
12. International Data Transfers
DocYuso is based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws different from those in your jurisdiction.
Where required, we implement appropriate safeguards for international transfers, such as Standard Contractual Clauses.
13. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date. For material changes, we will provide additional notice (such as email or an in-app notification) at least 14 days before the change takes effect, where appropriate.
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
DocYuso, Inc.
Email: support@docyuso.com
For privacy-related requests from California residents, please include “Privacy Request” in your subject line.