Privacy: Docuoria on your machine

This part of the Sidub Inc. Privacy Policy covers Docuoria run on your own machine by docuoria serve, the local server a developer tool starts. The Docuoria service is covered in Privacy: the Docuoria service.

What leaves your machine

• Documents never leave your machine. The local server reads them by path and extracts on the machine.
• Templates go to your organisation's account when the project's store is the account, the store docuoria init chooses by default. With the project folder as the store, templates stay in the project's .docuoria/ folder until docuoria store push copies them to the account. Ledgers stay in the project's .docuoria/ folder with either store.
• Licence use: the licence identifier, which features were used, how many units, and when, aggregated and sent periodically and when the server exits. It never includes document contents, file names, extracted values, or templates.
• docuoria login sends your email address to the identity provider, which confirms it with a one-time passcode, and the machine's host name to the service, which labels the machine's seat with it.
• docuoria doctor asks the service for its version.
• The commands that reach the service send what they name: docuoria store push the templates, docuoria license status and docuoria logout the machine credential, and docuoria account and docuoria account keys create your email address to the identity provider's device sign-in.

What stays on your machine

• A seat credential labelled with the machine's name, stored by docuoria login and revoked by docuoria logout or from the account. Treat it like a password.
• The project's .docuoria/ folder: templates when the folder is the store, ledgers, authoring drafts and batch jobs for 24 hours, and the server's logs.

Logs

Logs go to standard error and to .docuoria/logs/ on the machine; standard output carries the protocol only. Logs carry sizes, ids, timings, outcomes, and error codes. They never carry document text, file names, codes, tokens, or template content.

AI and prompt injection

Docuoria runs no AI model. Prompt injection is a concern of the AI tool you connect, and that tool owns injection defence. Docuoria treats tool results and document text as data, never instructions; an AI that follows injected text acts only within your own project and organisation's account. A stored template is replaced when the caller asks; Docuoria's guidance directs the AI to run a regression check first.

Questions and requests

Write to support@sidub.net for a question about this policy, to exercise a right over your personal information, or to have a document removed before its retention ends. Sidub Inc.'s full Privacy Policy is at https://docuoria.com/privacy.