Privacy Policy

About Doctiling

Doctiling ("we", "us", "the service") is an AI-assisted document workspace operated by the Doctiling team. Users upload or import documents into private "notebooks" and ask an AI agent grounded questions whose answers cite back to those documents.

This Privacy Policy describes how we collect, use, store and protect the data you provide when using https://www.doctiling.app.

Data we collect

Account data: email, display name, profile preferences (language, avatar) and the OAuth credentials of integrations you connect (e.g. Google Drive).

Notebook content: documents, blocks and metadata you upload, generate or import — including files you choose to bring in from Google Drive.

Usage data: timestamps of AI requests, quota counters and minimal access logs (request method, status code, latency) needed to operate the service.

We do not collect, sell or share advertising profiles, location data, contacts or any data the user has not explicitly chosen to upload.

Google user data — Drive integration

When you connect Google Drive through the Integrations panel, Doctiling requests the OAuth scope `https://www.googleapis.com/auth/drive.file`. This is the narrowest possible Drive scope: it grants access ONLY to files you explicitly select via the Google Picker, never to your full Drive.

For each file you select we download its content via the official Google Drive API and store an extracted text representation inside your notebook. We persist the file id and a revision marker so you can re-sync the document on demand.

Doctiling's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do NOT use Google user data to train AI models, share it with third parties, serve advertisements or for any purpose other than delivering the user-facing import / re-sync feature you triggered.

How we use your data

To provide the core product: store your notebooks, run AI grounded over your content, return citations.

To enforce per-plan limits (documents per notebook, AI requests per window).

To improve product quality via aggregated, non-identifying usage metrics.

To respond to your support requests when you email support@doctiling.app.

Storage and sub-processors

Content (documents, blocks, embeddings) is stored in Turso (libSQL) instances we operate.

Application hosting and build infrastructure: Railway.

AI inference: a frontier large-language-model provider, called server-side only with the minimum context required to answer your query.

Embedding generation: a vector embedding provider, called server-side only.

Transactional email (magic-link sign in): Resend.

None of these sub-processors receive your content for purposes other than executing your request.

Data retention and deletion

Your notebook content remains in your account until you delete it or your account itself.

To delete an integration: Settings → Integrations → Disconnect. Access tokens are removed immediately. Documents already imported remain in your notebooks (they belong to you) and can be deleted individually.

To delete your entire account, email support@doctiling.app from the address tied to your account. We will remove all content within 30 days.

Your rights

You may request a copy of the personal data we hold about you, ask us to correct it, or request deletion. Contact support@doctiling.app.

You may revoke Doctiling's access to your Google Drive at any time by visiting https://myaccount.google.com/permissions.

Security

All traffic is encrypted in transit over HTTPS. Access tokens, refresh tokens and secrets are stored with restricted internal access and never exposed to the browser beyond what is required by the Google Picker.

No security control is perfect; if you suspect a vulnerability, please report it to support@doctiling.app.

Children

Doctiling is not directed to children under 13. We do not knowingly collect data from minors.

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email and reflected in the "Last updated" date above.

Contact

Doctiling — support@doctiling.app