Privacy Policy

DocTik, Inc. ("DocTik," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our platform and services.

By using DocTik, you agree to the practices described in this policy. If you do not agree, please do not use our Service.

Account Information: When you register, we collect your name, email address, and password (stored encrypted).

Case Data: Documents, notes, timelines, evidence descriptions, and other case materials you upload or create within DocTik. This may include legally sensitive information — we treat it accordingly.

AI Interactions: Conversations with DocTik AI are processed to generate responses. We use Anthropic's Claude API for AI features; your messages are sent to Anthropic's API subject to their Privacy Policy. We do not use your case data to train our models.

Usage Data: Log data including IP address, browser type, pages visited, features used, and timestamps. We use this to improve the service and diagnose issues.

Payment Information: Billing is handled by Stripe. We do not store credit card numbers. We receive confirmation of payment status and subscription tier.

Cookies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

• Providing and improving the DocTik service
• Processing your AI requests and returning results
• Sending transactional emails (account verification, password reset, billing receipts)
• Sending service announcements and updates (you may opt out of non-essential communications)
• Monitoring for security threats and abuse
• Complying with legal obligations
• Conducting anonymized analytics to improve product features

We do not sell your personal data. We do not use your case content for advertising.

We understand that case data may include highly sensitive information — medical records, financial documents, personal disputes, and communications with attorneys. We treat all case data as confidential and implement security controls appropriate to its sensitivity.

Access to case data by DocTik personnel is limited to cases of technical support (only with your explicit permission), security investigations, or legal requirements.

We share your information only in these circumstances:

• Service providers: Supabase (database/auth), Anthropic (AI processing), Stripe (payments), Resend (email delivery), Vercel (hosting). Each operates under data processing agreements and appropriate privacy controls.
• Legal requirements: If required by valid court order, subpoena, or applicable law. We will notify you of such requests where legally permitted.
• Business transfer: In the event of a merger or acquisition, your data may transfer to the successor entity under equivalent privacy protections.
• With your consent: For any other purpose with your explicit permission.

We do not share your case data, AI conversations, or documents with opposing parties, courts, or other users.

Account data: Retained while your account is active. Deleted within 90 days of account closure upon request.

Case data and documents: Retained while your account is active. You may delete individual cases or documents at any time. Upon account deletion, all case data is permanently deleted within 90 days.

AI chat history: Retained indefinitely to support your case continuity, even if a case is deleted (conversations are disassociated from the case but preserved). You may delete individual conversations from your account.

Billing records: Retained for 7 years as required by financial regulations.

Usage logs: Retained for 12 months for security and debugging, then deleted.

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Row-level security in our database — your data is isolated from other users
• Multi-factor authentication support
• Regular security audits and dependency updates
• Access controls limiting employee access to user data

No system is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information (most data is editable directly in the platform)
• Deletion: Request deletion of your account and associated data
• Portability: Export your case data in a structured format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit certain processing of your data

To exercise these rights, contact us at privacy@doctik.co. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information (with certain exceptions)
• Right to opt out of the sale of personal information — we do not sell personal information
• Right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, email privacy@doctik.co with the subject line "CCPA Request."

DocTik is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately at privacy@doctik.co.

DocTik may contain links to external websites (e.g., court websites, legal resources). We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

DocTik uses AI to analyze documents, generate legal research, and draft content. This constitutes automated processing of your personal data. You have the right to:

• Know that AI processing is occurring (AI responses are clearly labeled)
• Understand that AI outputs are not verified by humans before delivery
• Request that significant legal decisions not be based solely on automated processing

AI conversations are sent to Anthropic's API for processing. Anthropic's data handling is governed by their Privacy Policy. We use prompt caching for efficiency; cached prompts are stored temporarily on Anthropic's infrastructure (up to 5 minutes).

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice at least 14 days before they take effect. Continued use of DocTik after changes constitutes acceptance.

For privacy questions, requests, or concerns:

DocTik, Inc.
Email: privacy@doctik.co