Privacy: the Docuoria service

This part of the Sidub Inc. Privacy Policy covers Docuoria when an application connects to the Docuoria service, the cloud host Sidub Inc. operates: claude.ai, ChatGPT, Cowork, a developer tool on the connector, Power Automate, or n8n. Docuoria run on your own machine is covered in Privacy: Docuoria on your machine.

What leaves your machine

• A document reaches the service only when you or your flow uploads it: attached in a chat and uploaded by the AI's code execution sandbox, or posted by a flow.
• The rows extracted from a document return to the application that asked for them.
• Signing in sends your email address to the identity provider, which confirms it with a one-time passcode.

What the service stores, and for how long

• Uploaded documents: 24 hours, then refused and deleted; the storage lifecycle rule removes the bytes within the following day, so an uploaded document is gone within 48 hours. Deleting a document removes it at once.
• Authoring drafts and batch jobs: 24 hours.
• Upload tickets: 10 minutes. A ticket can add PDFs to your organisation's account and read nothing.
• Download links for large results: 10 minutes.
• Invitation emails: queued for delivery for up to 24 hours.
• Templates and account ledgers: until your organisation deletes them, or 90 days after it last had a live seat.
• Your account: your email address, your directory identifier, the version of the terms you accepted and when, your organisation, and its members and roles.
• Sign-in: an access token lasts 1 hour; a refresh token lasts 30 days and is replaced at each use. Connection keys, refresh tokens, and upload tickets are stored only as hashes; seat credentials are stored encrypted.
• An organisation with no live seat is read-only for 90 days: its templates and ledgers stay readable, and its owners are emailed 14 days before the end. Then the organisation and everything in it is deleted, as an owner's delete would.
• When an owner deletes the organisation, its stores are removed and every seat credential and machine is revoked.

Logs

Logs carry sizes, ids, timings, outcomes, and error codes. They never carry document text, file names, codes, tokens, or template content.

AI and prompt injection

Docuoria runs no AI model; no document is read by a model or used for any purpose but the call that uploaded it. Prompt injection is a concern of the AI platform you connect, and that platform owns injection defence. Docuoria treats tool results and document text as data, never instructions; an AI that follows injected text acts only within your own organisation's account. A stored template is replaced when the caller asks; Docuoria's guidance directs the AI to run a regression check first.

Other hosting modes

• Single-tenant: documents are processed in your organisation's own deployment and deleted within 48 hours of upload, or on request.
• Self-hosted: documents never leave your organisation's own subscription.

Questions and requests

Write to support@sidub.net for a question about this policy, to exercise a right over your personal information, or to have a document removed before its retention ends. Sidub Inc.'s full Privacy Policy is at https://docuoria.com/privacy.