Privacy policy

Overview

DocDiff processes documents and account information only to provide document comparison, report access, billing, security, and support. We do not sell personal information.

Information we collect

We collect the files you choose to upload, your email address, account and sign-in information, comparison results, service usage, technical security logs, and purchase or subscription status. Stripe processes payment-card details; DocDiff does not store full card numbers.

To prevent upload abuse, we keep short-lived daily counters keyed with one-way digests of account, email, network, and browser-device identifiers. These counters do not contain the underlying email address, IP address, or device token and are deleted after seven days.

We separately retain privacy-minimized upload-control events for 30 days so staff can diagnose quota pressure and abuse. These events contain the decision, bounded reason code, account tier, counter-dimension names, byte or page totals, date, and an optional internal comparison number; they do not contain the identifiers, their one-way digests, filenames, or document text.

When an address permanently bounces or reports a message as unwanted, we retain a keyed one-way digest of that address so we can stop future delivery attempts and protect the service's email reputation. The suppression record does not contain the underlying address.

We use Google Analytics and Google Ads to understand how people find and use DocDiff and whether advertising leads to completed purchases. These services may use cookies and receive page location, campaign details, browser information, and bounded product events such as a comparison submission, report view, checkout start, or purchase. When an advertising link includes a Google click identifier, DocDiff stores it for up to 90 days to reconcile purchases and then deletes it. We do not send document text, filenames, or email addresses in these analytics events.

How documents are processed

Uploaded files are privately stored and parsed to identify text, layout, and differences. The free browser diff stops after deterministic extraction and alignment and does not send document text to an AI model. When you purchase or activate an AI Review, relevant changed language and nearby context may be sent to selected model providers to assess meaning and importance. If you use report chat, we send your question, recent chat context, and a limited selection of verified report findings and source excerpts needed to answer it. We do not intentionally send your email address, filenames, or entire documents with model requests.

We may use documents and comparison results submitted through the free service to evaluate, improve, and develop DocDiff’s parsing, comparison, and AI systems. We do not sell uploaded documents. Content associated with a paid report or paid subscription is used to provide and secure the service and is not used for product-training datasets without separate permission.

Retention and deletion

Unpaid uploads are scheduled for deletion three days after upload. One-time purchases and canceled subscriptions retain reports and source documents for up to three years. Active subscriptions remain available while active; deleting your account starts the deletion process sooner. You may request earlier deletion from the comparison page. Billing, fraud-prevention, and audit records may be retained separately where reasonably necessary or legally required.

A request that was already underway when deletion was requested may finish before the comparison is permanently purged. Deletion prevents new requests and waits briefly for an already-started request to end before removing chat content.

Service providers

We use infrastructure, storage, email, payment, authentication, analytics, advertising, error-monitoring, and AI service providers to operate DocDiff. These providers receive only the information needed for their role and handle it under their own terms and privacy obligations.

Your choices

You may request access to, correction of, or deletion of personal information, subject to legal and security requirements. You can also delete individual comparisons using the controls provided in the service.

You can limit analytics and advertising cookies through your browser settings or a content blocker. Google also provides advertising and analytics controls through its own privacy settings and opt-out tools. DocDiff does not create a replacement advertising identifier, but an identifier included in an advertising link may still be stored as described above.

Contact

Questions or privacy requests may be sent to [email protected].