Privacy Policy | DocYuso

Note: This document is a template draft for DocYuso, Inc. It should be reviewed by qualified legal counsel before you rely on it in production.

DocYuso, Inc. (“DocYuso,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our secure document delivery platform and related services (the “Service”).

1. Overview

DocYuso helps businesses upload documents, merge them into PDF packages, and send secure download links to recipients with delivery tracking. To provide this Service, we process information about account holders (“you” or “customers”) and the recipients you send documents to.

This policy applies to information collected through our website, web application, and related communications. It does not apply to third-party websites or services that may link to or integrate with DocYuso.

2. Information We Collect

Information you provide

Account information: Name, email address, organization name, password (stored in hashed form), and billing details for paid plans
Uploaded documents: Files you upload to create packages, including metadata such as file names and upload timestamps
Recipient information: Email addresses and names of people you send packages to
Communications: Messages you send to our support team and feedback you provide

Information collected automatically

Usage data: Pages viewed, features used, actions taken within the dashboard, and referral sources
Device and log data: IP address, browser type, operating system, device identifiers, and access timestamps
Delivery events: When packages are sent, links are opened, email verification is completed, and downloads occur

Information from third parties

Payment processors: Billing status and transaction identifiers (we do not store full payment card numbers)
Authentication providers: If you sign in through a third-party identity provider, we may receive basic profile information as permitted by that provider

3. How We Use Information

We use collected information to:

Provide, operate, and maintain the Service
Process and deliver document packages to your designated recipients
Send transactional emails (delivery notifications, verification codes, account alerts)
Display delivery and download status in your dashboard
Process payments and manage subscriptions
Respond to support requests and communicate about the Service
Monitor, detect, and prevent fraud, abuse, and security incidents
Improve and develop new features
Comply with legal obligations

We do not sell your personal information. We do not use uploaded document content for advertising purposes.

4. Document and Recipient Data

When you upload documents and send packages through DocYuso:

Your documents are stored securely to enable delivery, download, and tracking. You control who receives access via unique links and email verification.
Recipient data (such as email addresses) is used solely to deliver packages, verify identity, and provide you with delivery status. Recipients who do not have DocYuso accounts are not marketed to unless they separately opt in.
Access controls: Only you (and authorized team members on your account) can view your dashboard and package details. Recipients can access only the packages sent to them, subject to verification requirements you configure.

You are responsible for ensuring you have a lawful basis to share recipient information and document content with us and to send documents to those recipients.

We may share information in the following circumstances:

Service providers: With vendors who help us operate the Service (hosting, email delivery, payment processing, analytics, customer support), bound by contractual obligations to protect data and use it only for our instructions
Legal requirements: When required by law, regulation, legal process, or government request, or to protect the rights, property, or safety of DocYuso, our users, or others
Business transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations
With your consent: When you direct us to share information or enable integrations with third-party services

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

6. Data Retention

We retain information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

Account data is retained while your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes
Uploaded documents and package data are retained according to your plan settings and our internal retention schedules; you may delete packages through the Service where available
Log and usage data is typically retained for a limited period for security, analytics, and troubleshooting

When data is no longer needed, we delete or de-identify it using commercially reasonable methods.

7. Security

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, and monitoring.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

8. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information:

All users

Access and correction: You may access and update account information through your account settings or by contacting us
Deletion: You may request deletion of your account and associated data, subject to legal retention requirements
Marketing opt-out: You may opt out of promotional emails by using the unsubscribe link or contacting us (transactional emails related to the Service will still be sent)

California residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, including:

The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information)
The right to request deletion of personal information, subject to exceptions
The right to correct inaccurate personal information
The right to opt out of the sale or sharing of personal information (not applicable — we do not sell or share for cross-context behavioral advertising)
The right to non-discrimination for exercising your privacy rights

To exercise these rights, email support@docyuso.com. We will verify your request before responding. You may designate an authorized agent to submit requests on your behalf.

Other jurisdictions

If you are located in the European Economic Area, United Kingdom, or other regions with data protection laws, you may have additional rights (such as data portability or objection to processing). Contact us to exercise applicable rights.

9. Cookies and Similar Technologies

We use cookies and similar technologies to:

Keep you signed in and maintain session state
Remember your preferences
Understand how the Service is used and improve performance
Detect and prevent abuse

You can control cookies through your browser settings. Disabling certain cookies may limit functionality of the Service.

We may use analytics tools that collect usage information. Where required, we will obtain consent before using non-essential cookies.

10. Children’s Privacy

The Service is not directed to individuals under 13 years of age (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take steps to delete it.

11. International Data Transfers

DocYuso is based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws different from those in your jurisdiction.

Where required, we implement appropriate safeguards for international transfers.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date. For material changes, we will provide additional notice (such as email or an in-app notification) where appropriate.

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

DocYuso, Inc.
Email: support@docyuso.com

For privacy-related requests from California residents, please include “Privacy Request” in your subject line.