Privacy Policy

About Doctiling

Doctiling ("we", "us", "the service") is an AI-assisted document workspace operated by VELYNE S.A.S.. Users upload or import documents into private "knowledge bases" and ask an AI agent grounded questions whose answers cite back to those documents.

This Privacy Policy describes how we collect, use, store and protect the data you provide when using https://www.doctiling.app.

Data we collect

Account data: email, display name and profile preferences (language, avatar).

Knowledge base content: documents, blocks and metadata you upload, generate or import.

Usage data: timestamps of AI requests, quota counters and minimal access logs (request method, status code, latency) needed to operate the service.

We do not collect, sell or share advertising profiles, location data, contacts or any data the user has not explicitly chosen to upload.

How we use your data

To provide the core product: store your knowledge bases, run AI grounded over your content, return citations.

To enforce per-plan limits (documents per knowledge base, AI requests per window).

To improve product quality via aggregated, non-identifying usage metrics.

To respond to your support requests when you email support@doctiling.app.

Storage and sub-processors

Content (documents, blocks, embeddings) is stored in managed database instances we operate.

Application hosting and build infrastructure: a managed hosting provider.

AI inference: a frontier large-language-model provider, called server-side only with the minimum context required to answer your query.

Embedding generation: a vector embedding provider, called server-side only.

Transactional email (magic-link sign in): a transactional email provider.

None of these sub-processors receive your content for purposes other than executing your request.

Data retention by type

Account data: kept while your account exists, plus a 30-day grace period after you request deletion.

Documents and knowledge bases: kept while your account exists.

Deleted knowledge bases and documents, with their attachments: 15 days in the trash, where you can restore them; then they are erased for good, irreversibly. You can erase them sooner from the trash.

MCP call trail (audit metadata, no content): 90 days.

Compliance trail (consent, export, deletion events): 5 years, even after your account is deleted.

Demo requests: 12 months.

You can also export or delete your own account data at any time from your profile — see "Your rights" below and the full data-processing policy.

Data retention and deletion

Your knowledge base content remains in your account until you delete it or your account itself. What you delete stays 15 days in the trash, where you can restore it or erase it sooner; after that it is erased for good, attachments included.

To delete your entire account, use "Delete my account" in your profile, or email support@doctiling.app from the address tied to your account.

Your rights

You may request a copy of the personal data we hold about you (export), ask us to correct it, request proof of your authorization, or request deletion. Use your profile or write to privacidad@doctiling.app. You may also complain to the Superintendencia de Industria y Comercio once you have raised the matter with us.

Security

All traffic is encrypted in transit over HTTPS. Access tokens, refresh tokens and secrets are stored with restricted internal access and never exposed to the browser.

No security control is perfect; if you suspect a vulnerability, please report it to support@doctiling.app.

Children

Doctiling is aimed at adults. We do not knowingly collect data from minors under 18 without their legal representative's authorization (Ley 1581 art. 7).

Data breach notification

If a personal data breach occurs, we notify affected users without undue delay and report it to the Superintendencia de Industria y Comercio (Ley 1581 art. 17 lit. n).

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email and reflected in the "Last updated" date above.

Related policies

Full data-processing policy (responsible party, purposes, rights procedure, international transfer, retention): https://www.doctiling.app/en/data-processing.

Cookies: https://www.doctiling.app/en/cookies. Sub-processors: https://www.doctiling.app/en/subprocessors. Security: https://www.doctiling.app/en/security.

Contact

Doctiling — support@doctiling.app