Privacy Policy

Last updated: 27 June 2026.

Who is responsible

The controller for your personal data is Docutati (Netherlands, KvK 42095190, BTW-id NL005492040B03). Contact: [email protected].

What we process

The documents you upload (PDF, DOCX, TXT or Markdown), the email address you provide at checkout (we don't ask for one before you decide to pay), and basic technical request data. If you use the interactive chat, we also process the questions you ask and the answers, stored as a conversation tied to your document. We use your email only to deliver your report or chat link and transactional messages about your order.

Where it is processed

Your documents and any chat questions are processed on our own private infrastructure located in the EU, by models we run ourselves. They are never sent to any third-party AI provider, and are never used to train any model.

Retention

Uploaded documents, generated reports and chat conversations are automatically and permanently deleted from our systems within 7 days. We retain minimal order records (e.g. payment reference, email) only as required for accounting and legal obligations.

Security & server logs

To keep the service secure and prevent abuse, our servers keep minimal technical logs (such as the IP address, timestamp and requested page). These logs are retained for up to 90 days and are not used to profile or track you across sites. Documents are processed by an isolated, network-restricted worker that has no internet access.

Optional sign-in

If you choose "Continue with Google" or "Continue with Microsoft" to fill in your email address, we receive only your verified email address from that provider — nothing else, and your documents are never shared with them. Typing your email manually works exactly the same. The sign-in is purely optional.

Payments

Payments are handled by Stripe, which acts as an independent processor of your payment data. We never receive or store your card details. See Stripe's privacy policy for details.

Cookies & local storage

Browsing Docutati sets no cookies at all — no tracking cookies, no analytics cookies, and therefore no cookie banner. If you choose the optional "Continue with Google/Microsoft" sign-in, one strictly-necessary session cookie is set to perform that sign-in (it holds the sign-in state and your verified email, expires after 1 hour, and is never used for tracking). Your browser's local storage is used only to let you resume your own recent jobs on this device. That information never leaves your browser.

Analytics

We use privacy-friendly, cookieless analytics that do not track you across sites and do not collect personal information. No advertising or third-party trackers are used.

Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data. Contact [email protected].

← Back

Try it — no sign-up →