We collect: (a) documents you upload; (b) profile information you enter; (c) your Google account name and email address; (d) form fill usage counts and timestamps; (e) subscription and billing status; (f) basic technical logs (errors, latency) for service reliability. We do not collect browsing history, passwords, or form content from pages you visit.
Your data is used solely to operate DocPilot — to retrieve relevant passages from your documents and fill forms on your explicit request. We do not sell, rent, license, or share your personal data or documents with any third party for advertising, analytics, or any other purpose.
Documents are stored on secured servers with encryption at rest and in transit. They are processed by AI only when you trigger a form fill. We do not read, review, or use your documents for any purpose other than providing the service to you.
We use: Stripe for payment processing (they receive billing info only, not your documents — see stripe.com/privacy); Google OAuth for authentication (they receive a sign-in token only). No other third parties receive your data. AI processing is performed server-side by DocPilot, not by third-party AI APIs that retain your data.
Your data is retained while your account is active. If you cancel your subscription your data remains until you request deletion. You may delete individual documents at any time from the extension. To delete your entire account and all associated data, contact us — we will process deletion within 30 days.
Depending on your location, you may have the right to: access a copy of your personal data; correct inaccurate data; request deletion (“right to be forgotten”); object to or restrict certain processing; data portability. To exercise any right, contact us. We will respond within 30 days. We do not discriminate against users who exercise privacy rights.
DocPilot is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately for deletion.
We may update this Privacy Policy. Material changes will be communicated via the extension. Continued use after changes constitutes acceptance.