1. Data We Collect

We collect the following information to provide and improve our secure document storage services:

• Email Address: Handled during sign-up for account creation, OTP verification, login state setup, and transactional updates.
• Uploaded Documents / Secure Files: Saved securely on our authenticated storage environments, ensuring retrieve-rights belong solely to your verified session.
• Billing & Payment Information: Financial transactions are processed directly by our integrated payment gateway partner (Razorpay / Stripe). We do not collect or store credit/debit card numbers or bank credentials on our systems.
• Device & Session Metadata: Minimal parameters (IP address, operating system, browser client type) are tracked to authenticate login security, identify unrecognized login alerts, and prevent security intrusions.

2. Why We Collect Data & How We Use It

The information we gather is used strictly for the following services:

• To securely provision, run, and manage your private file storage space on DocPin.
• To verify identity and authenticate access securely via OTP parameters.
• To compile and retrieve stored files from any authorized browser device.
• To dispatch transactional quota alerts, payment updates, and critical system safety messages.

3. Sharing Information with Third Parties

Your privacy is central to our ethics. We do not sell, lease, or distribute your email addresses or document contents to tracking brokers or advertising parties. Data is only processed through safe, isolated backend systems:

• Storage and Database Hosting (e.g., Supabase / Firebase / Firestore): All user profile data and database records are housed securely on isolated, enterprise-grade cloud servers.
• Payment Gateway Handlers (e.g., Razorpay / Stripe): Payments are executed via verified, PCI-DSS compliant aggregators. Only essential reference tokens are transmitted to acknowledge and adjust storage caps.

4. Data Retention & Account Deletion Protocol

When you manually delete a document or initiate an account deletion request, your data is immediately and permanently erased from our active servers and backups. This process is irreversible — DocPin has no capability or method to retrieve or recover deleted data. Please ensure you download all necessary files before initiating deletion.

• Immediate File Purging: Deleting any item from your files view triggers immediate and complete erasure from our active database records.
• Permanent Deletion: If you delete your account, your email address, billing references, and all secure document files are permanently and safely shredded from our database layers immediately and completely. No residual archival shadow backups are maintained.

Free Trial Abuse Prevention:

Upon account deletion, all your personal data, documents, and account information are permanently and immediately erased from our servers and cannot be recovered.

As an exception to the above, a one-way cryptographic hash (SHA-256) of your email address is retained indefinitely in our systems solely to prevent repeated misuse of the one-time free trial offer. This hash cannot be reverse-engineered to obtain your original email address and is not used for any other purpose, including marketing or identification.

5. Security Measures

We deploy rigorous administrative, physical, and digital safeguards, including TLS HTTPS encryption protocols for transit, strict token-based session isolations, and solid system firewalls to block brute-force attempts on vault passcode codes.

6. Your Rights & Sovereignty

As a valued user, you hold complete sovereignty over your personal data:

• Right to Access: You can sign in anytime to verify and access all records and files stored in your space.
• Right to Deletion: You have absolute power to purge separate records or command complete account teardowns.
• Right to Complain: You can raise safety compliance questions or complain about data concerns through our official contact lines.