Privacy Policy

Account information

When you sign in with GitHub, we receive your GitHub username, display name, email address, and profile picture URL. We store these to identify your account and personalise your dashboard.

Code you submit

When you generate documentation, the code you paste is sent to our AI provider (currently Groq / Anthropic) to produce the output. We store the input code and the generated output in our database so you can access your history. We do not use your code to train AI models.

Usage data

We track how many documents you generate per month to enforce plan limits. We log the language and doc type selected, and the number of tokens used per generation.

Payment information

Payments are processed by Razorpay. We do not store your card details, bank account numbers, or UPI IDs. We receive a customer ID and subscription ID from Razorpay to manage your plan.

Technical data

We collect standard server logs including IP addresses, browser user-agent strings, and request timestamps for security monitoring and debugging. These are retained for 30 days.

To provide the service

Your account data is used to authenticate you. Your code submissions are processed by AI to generate documentation. Usage data is used to enforce plan limits.

To improve the product

We analyse aggregate usage patterns (which languages are most popular, which doc types are used most) to prioritise features. This is always aggregate — never individual.

To communicate with you

We may email you about billing events (subscription renewals, payment failures), product updates you've opted into, and security notices. We do not send marketing emails without opt-in.

AI providers

Code you submit is sent to Groq (and optionally Anthropic) for processing. These providers process data on our behalf and are contractually prohibited from using your data to train their models. See Groq's privacy policy at groq.com/privacy and Anthropic's at anthropic.com/privacy.

Database

We use Supabase (hosted on AWS ap-south-1, Mumbai) for our database. Data is encrypted at rest and in transit.

Payments

Razorpay processes all payments. They are PCI-DSS compliant. See razorpay.com/privacy for details.

Hosting

Our application runs on Vercel (US East region). Vercel does not have access to your data beyond what is necessary to serve HTTP requests.

No selling of data

We do not sell, rent, or share your personal data with any third parties for advertising or commercial purposes. Full stop.

Account data

Retained for as long as your account is active. If you delete your account, we delete your profile, documents, and usage logs within 30 days.

Generated documents

Stored indefinitely so you can access your history. You can delete individual documents from your dashboard at any time.

Server logs

Retained for 30 days then automatically deleted.

Billing records

Retained for 7 years as required by Indian tax law (GST compliance).

Access

You can view all your generated documents in your dashboard history tab at any time.

Deletion

Email hello@beveez.tech with subject 'Delete my account' and we will delete all your personal data within 30 days.

Export

Email hello@beveez.tech to request a copy of all data we hold about you in JSON format.

Correction

If your name or email is incorrect in our system, email us and we will correct it within 7 days.

Encryption

All data is encrypted in transit using TLS 1.3. Database data is encrypted at rest using AES-256.

Access control

Only essential team members can access production data. All access is logged and audited.

Incident response

In the event of a data breach affecting your personal data, we will notify you by email within 72 hours.

Session cookies

We use a single session cookie (next-auth.session-token) to keep you signed in. This is a strictly necessary cookie — the service cannot function without it.

No tracking cookies

We do not use advertising cookies, third-party analytics cookies, or any tracking pixels. DocAI is ad-free.

Age requirement

DocAI is not intended for users under 13 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.

Notification

We will notify you by email at least 14 days before making any material changes to this policy. Continued use of the service after the effective date constitutes acceptance.

Data controller

Beveez Tech, Kharar, Punjab, India. Email: hello@beveez.tech