Draft: fill in the business details in lib/site.ts and have a lawyer review this page before launch.
Privacy Policy
Last updated: 3 November 2026
This policy explains what [Your registered business or proprietor name] (“we”) collects when you use DocLens, why, and your rights under the Digital Personal Data Protection Act, 2023 and other Indian law. In short: we do not keep your documents, and we collect only what we need to run the service and your plan.
1. What we collect
- Documents you upload: processed only to produce your analysis. See section 3.
- Device identifier: a random ID stored in a cookie on your browser, used to count your free analyses. It is not linked to your name.
- Google account details, only if you sign in to buy a plan: your name, email address and Google account ID. We never see your Google password.
- Plan and usage records: which plan you bought, when it started and ends, and how many analyses you have used.
- Payment records: order ID, plan and amount. Card, UPI and bank details are entered on Razorpay’s secure checkout and are never seen or stored by us.
- Technical data: IP address and basic request information, used for security and to prevent abuse (rate limiting). Error logs never include document content.
2. Why we use it
- to analyse the documents you upload and show you the results;
- to apply the free limit and your paid plan;
- to process payments, refunds and invoices;
- to keep the service secure and prevent misuse;
- to reply when you contact us, and to meet our legal obligations.
We do not sell your personal data and we do not use your documents to advertise to you.
3. How your documents are handled
- Your file is processed in server memory only for as long as the analysis takes. We do not save it to disk or a database, and we do not log its contents.
- To produce the analysis, the document's text (or, for photos and scanned PDFs, the image) is sent to our AI provider, Anthropic, which processes it on our behalf under its commercial terms. Under those terms it does not use this data to train its models. It may keep it for a limited period for safety and abuse monitoring, as described in its policies.
- The finished analysis is kept only in your own browser (session storage) and is cleared when you close the tab.
Please avoid uploading documents with more personal information than you need, such as full Aadhaar or bank account numbers.
4. Who we share data with
We use these service providers, only for the purposes above:
- Anthropic: AI analysis of documents (may process data outside India);
- Razorpay: payment processing;
- Google: sign-in;
- Upstash: storing usage counters, plan and order records;
- our hosting provider, which runs the website.
We may also disclose data if required by law or by a valid order of a court or government authority.
5. How long we keep it
- Documents: not kept by us after the analysis finishes.
- Device cookie and free-usage count: up to 2 years.
- Sign-in session: up to 30 days, or until you sign out.
- Plan, usage and payment records: while your plan is active and afterwards for as long as tax and accounting law requires.
6. Cookies
We use only cookies needed for the service to work: the device cookie, the sign-in cookie, and a short-lived cookie used during Google sign-in. We do not use advertising or tracking cookies. Your theme setting is saved in your browser’s local storage.
7. Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to erase it, unless we must keep it by law;
- withdraw consent, for example by signing out and asking us to delete your account;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if unresolved, complain to the Data Protection Board of India.
Email grievance@doclens.live from the email address linked to your account. We will reply within 2 business days and resolve requests within the time limits set by law.
8. Children
The service is meant for people aged 18 and over. We do not knowingly collect personal data from children.
9. Security
We use HTTPS, signed cookies, strict security headers and access controls. No system is perfectly secure. If a breach affects your personal data, we will inform you and the authorities as required by law.
10. Grievance Officer
[Full name of Grievance Officer]
[Your registered business or proprietor name], [Registered address, City, State, PIN code]
grievance@doclens.live
11. Changes
We may update this policy. The “Last updated” date above shows when it last changed.