Privacy Policy

How Docraft handles the documents you upload.

The short version

• Your documents are yours. We convert them and then delete them on your schedule.
• The native Transform lane does not send documents to third parties or use them for training.
• The experimental AI Scan Lab sends a page to an external AI provider only after you explicitly consent.

What we store

For each conversion we keep the source PDF, the generated Word file, and a record of the job — file name, size, page count, how long it took, and any constructs the engine could not reconstruct.

The Scan Lab is a separate research workflow. It is limited to one page, asks for consent before processing, and should be used only with public, synthetic, or rights-cleared material. Do not upload confidential customer documents to it. The current preview does not save the scan or generated draft to workspace storage; they remain in the active browser/request flow unless you download the result.

Files are stored encrypted in object storage, keyed by workspace. They are reachable only through short-lived signed links issued after we have checked that you are a member of that workspace.

Retention

Every workspace has a retention window, 30 days by default and configurable in settings. When it elapses, both the source PDF and the generated Word file are deleted permanently. The job record — the file name and the statistics, not the content — stays so your history remains readable.

Deleting a conversion yourself removes both files immediately.

Who can see your documents

Members of your workspace, and nobody else. Isolation is enforced in the database itself rather than only in application code, so a bug in a screen cannot expose another company’s files.

Our engineers do not access customer documents. Where support genuinely requires it, we ask you first and you can decline.

What we collect besides documents

Your email address and name from sign-in, your workspace membership, and product analytics about how the app is used — which screens, which actions, which errors. Analytics never include document contents or file names.

Your rights

You can export or delete your data at any time. Deleting a workspace removes its conversions and stored files. Write to privacy@docraft.co and a person will answer.

Changes

If this policy changes in a way that affects how your documents are handled, we will tell you before it takes effect rather than quietly updating this page.