Privacy Policy

About Doctiling

Doctiling ("we", "us", "the service") is an AI-assisted document workspace operated by the Doctiling team. Users upload or import documents into private "notebooks" and ask an AI agent grounded questions whose answers cite back to those documents.

This Privacy Policy describes how we collect, use, store and protect the data you provide when using https://www.doctiling.app.

Data we collect

Account data: email, display name and profile preferences (language, avatar).

Notebook content: documents, blocks and metadata you upload, generate or import.

Usage data: timestamps of AI requests, quota counters and minimal access logs (request method, status code, latency) needed to operate the service.

We do not collect, sell or share advertising profiles, location data, contacts or any data the user has not explicitly chosen to upload.

How we use your data

To provide the core product: store your notebooks, run AI grounded over your content, return citations.

To enforce per-plan limits (documents per notebook, AI requests per window).

To improve product quality via aggregated, non-identifying usage metrics.

To respond to your support requests when you email support@doctiling.app.

Storage and sub-processors

Content (documents, blocks, embeddings) is stored in Turso (libSQL) instances we operate.

Application hosting and build infrastructure: Railway.

AI inference: a frontier large-language-model provider, called server-side only with the minimum context required to answer your query.

Embedding generation: a vector embedding provider, called server-side only.

Transactional email (magic-link sign in): Resend.

None of these sub-processors receive your content for purposes other than executing your request.

Data retention and deletion

Your notebook content remains in your account until you delete it or your account itself.

To delete your entire account, email support@doctiling.app from the address tied to your account. We will remove all content within 30 days.

Your rights

You may request a copy of the personal data we hold about you, ask us to correct it, or request deletion. Contact support@doctiling.app.

Security

All traffic is encrypted in transit over HTTPS. Access tokens, refresh tokens and secrets are stored with restricted internal access and never exposed to the browser.

No security control is perfect; if you suspect a vulnerability, please report it to support@doctiling.app.

Children

Doctiling is not directed to children under 13. We do not knowingly collect data from minors.

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email and reflected in the "Last updated" date above.

Contact

Doctiling — support@doctiling.app