Privacy Policy
Effective October 16, 2026
DocuConnect (the "Service", available at docuconnect.dev) is operated by Averis Solutions ("we", "us"). This policy explains what information we collect when you use the Service, how we use it, and the choices you have. Questions can be sent to privacy@averissolutions.com.
Information we collect
- Account information. Your name, email address and a securely hashed password if you register with email.
- Sign-in with Google, Microsoft or GitHub. When you choose one of these providers, we receive your name, email address, whether the provider has verified that email, and the provider's account identifier. We do not receive your provider password and we request no access to your files, contacts, repositories or mailbox.
- Content you create. Workspaces, pages, records, comments, uploads, labels and revision history that you or members of your organization add.
- Organization data. Organization names, memberships, roles, invitations and permissions.
- Connected agents. If you authorize an AI coding agent or API client, we store the credential (hashed), the permissions you grant and an audit trail of the actions it takes.
- Technical data. IP address, browser user agent, request logs, security and audit events, used to operate and protect the Service.
How we use information
- To provide the Service: authenticate you, store and sync your content, and enforce your organization's permissions.
- To send service email such as address verification, password recovery and invitations.
- To secure the Service: rate limiting, abuse prevention, audit logging and incident investigation.
- To maintain and improve reliability, including backups and troubleshooting.
We do not sell your personal information, do not use your content for advertising, and do not use your content to train AI models.
Cookies and local storage
We use a strictly necessary, HttpOnly session cookie to keep you signed in, and short-lived cookies to protect sign-in requests. The web app stores a copy of your recently used content in your browser (IndexedDB and a service worker cache) so it works offline; you can clear it by signing out or clearing site data. We do not use advertising or third-party analytics cookies.
How information is shared
- Within your organization. Content is visible to members according to the permissions your organization configures.
- Service providers that process data on our behalf: DigitalOcean (hosting and storage), Cloudflare (DNS) and our transactional email provider (Resend). They may only use it to provide their services to us.
- Sign-in providers (Google, Microsoft, GitHub) receive the standard sign-in request when you choose to use them.
- Legal requirements. When required by law or to protect the rights, safety and security of users and the Service.
Retention
We keep account and content data while your account or organization is active. Deleted content may remain in encrypted backups for up to 14 days, and generated exports are removed after 24 hours. Security and audit logs are kept as long as needed to protect the Service. When you ask us to delete your account, we delete or anonymize your personal information unless we must keep it for legal reasons.
Security
Traffic is encrypted with TLS, passwords and credentials are stored only as hashes, sessions use secure HttpOnly cookies, and access within an organization is permission-checked on every request. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.
Your choices and rights
You can update your profile, link or unlink sign-in providers and export your content from the app. Depending on where you live, you may have rights to access, correct, delete or port your personal information, or to object to certain processing. To make a request, email privacy@averissolutions.com. You can also revoke DocuConnect's access from your Google, Microsoft or GitHub account settings at any time.
Children
The Service is intended for work use and is not directed to children under 16. We do not knowingly collect their personal information.
International transfers
We and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers.
Changes
We may update this policy. If we make material changes, we will update the effective date above and, where appropriate, notify you in the app or by email.
Contact
Averis Solutions · privacy@averissolutions.com