Privacy Policy

A. Account Information

When you create or access a Re-Doc account, we may collect information such as:

• ·Your name
• ·Email address
• ·Authentication identifier
• ·Profile information associated with your sign-in method
• ·Organization or company name (where applicable)
• ·Subscription or billing plan
• ·Account preferences

If you choose to sign in using a third-party authentication provider such as Google, we receive only the information necessary to authenticate your account and create or maintain your Re-Doc profile. We do not receive or access your Google password.

B. Uploaded Documents and Customer Content

When you use Re-Doc, you may upload documents for processing. These documents may contain personal information, confidential business information, regulated data, or other sensitive content depending on the nature of the document. Examples include:

• ·Legal documents
• ·Medical records
• ·Financial documents
• ·Insurance claims
• ·Government forms
• ·Contracts
• ·HR records
• ·Identity documents
• ·Invoices
• ·Reports
• ·Customer correspondence

We process uploaded documents solely to perform the services requested by you, including document analysis, redaction, anonymization, pseudonymization, text replacement, entity detection, document conversion, and related processing functions.

Unless otherwise agreed, we do not review uploaded documents manually except where necessary to investigate a customer-reported technical issue, provide requested support, maintain platform security, or comply with applicable law.

C. Generated Outputs

During processing, Re-Doc creates one or more outputs based on your requested workflow. These may include:

• ·Redacted documents
• ·Anonymized documents
• ·Pseudonymized documents
• ·Converted document formats
• ·Extracted text
• ·Replacement mappings
• ·Processing reports
• ·Downloadable output files

Generated outputs are treated with the same level of protection as uploaded documents and are retained according to the applicable retention period unless deleted earlier.

D. Document Metadata

To operate the platform efficiently, we may store limited metadata associated with uploaded documents. Depending on the workflow, this may include:

• ·Original filename
• ·File size
• ·File type
• ·Upload timestamp
• ·Processing status
• ·Processing duration
• ·Job identifiers
• ·Download status
• ·Retention schedule

We do not intentionally use document metadata to profile users or for advertising purposes.

E. Technical and Usage Information

Like most online services, we automatically collect certain technical information when you access the Services. This may include:

• ·IP address
• ·Browser type
• ·Device information
• ·Operating system
• ·Language preferences
• ·Time zone
• ·Session identifiers
• ·Pages visited
• ·Feature usage
• ·Error diagnostics
• ·Performance metrics
• ·Security events

This information helps us maintain platform reliability, detect misuse, improve performance, and troubleshoot issues.

F. Authentication Information

Re-Doc currently supports authentication using Google Sign-In. When you authenticate using Google, we receive only the information necessary to identify your account and enable secure access to the Services, such as your name, email address, and authentication identifier, subject to the permissions you authorize.

We do not access your Google Drive, Gmail, contacts, calendar, or other Google services unless explicitly stated and separately authorized.

G. Payment Information

If you purchase a subscription or other paid services, payment processing is handled by trusted third-party payment providers. Re-Doc does not store complete credit card or debit card numbers on its own systems. We may receive limited billing information necessary to:

• ·verify subscription status;
• ·manage invoices;
• ·process refunds where applicable;
• ·comply with financial and tax obligations.

H. Analytics Information

We use analytics tools to understand how users interact with the Services and to improve functionality and performance. Analytics information may include:

• ·Pages visited
• ·Navigation flow
• ·Session duration
• ·Device type
• ·Browser information
• ·Approximate geographic region
• ·Interaction events
• ·Feature usage

We use analytics only to improve the Services and do not use analytics data to build advertising profiles or sell customer information.

I. Customer Support Information

When you contact Re-Doc for support, we may collect information such as:

• ·Your email address
• ·Support requests
• ·Correspondence
• ·Diagnostic information voluntarily provided by you
• ·Attachments submitted as part of a support request

Where possible, we encourage customers to avoid sending unnecessary sensitive information during support interactions.

J. Information We Do Not Intentionally Collect

Except where it is contained within documents that you choose to upload, Re-Doc does not intentionally collect:

• ·Biometric information
• ·Government-issued identification numbers
• ·Health information
• ·Financial account information
• ·Precise location information
• ·Children's personal information

If such information is contained within an uploaded document, it is processed solely to provide the requested document-processing services.

Secure Upload

Documents are transmitted to Re-Doc over encrypted network connections using industry-standard Transport Layer Security (TLS).

Once received, documents are stored within Re-Doc's processing infrastructure for the duration necessary to complete the requested processing workflow and according to the applicable retention period.

Document Analysis

Depending on the document format, Re-Doc may perform one or more document analysis operations, including:

• ·extracting machine-readable text;
• ·identifying document structure;
• ·recognizing tables and layouts;
• ·detecting images or embedded objects;
• ·identifying handwritten or printed content where supported; and
• ·preparing the document for downstream processing.

The specific analysis performed varies depending on the document type and requested functionality.

Optical Character Recognition (OCR)

Where uploaded documents contain scanned pages or image-based text, Re-Doc may perform Optical Character Recognition (OCR) to convert visual text into machine-readable text.

OCR processing may be performed using trusted third-party service providers acting on Re-Doc's behalf.

Document Conversion

Some workflows require documents to be converted between supported formats in order to preserve formatting, layout, or compatibility with downstream processing. For example, documents may be temporarily converted between PDF and Microsoft Word formats where necessary to perform requested processing operations.

Document conversion is performed only as required to provide the requested Services.

AI-Assisted Document Processing

To identify sensitive information and generate requested outputs, Re-Doc may use artificial intelligence models for tasks such as:

• ·entity detection;
• ·contextual analysis;
• ·anonymization;
• ·pseudonymization;
• ·synthetic text replacement;
• ·document classification;
• ·redaction recommendations; and
• ·related language processing tasks.

Where supported by the underlying AI service provider, Re-Doc routes requests through Zero Data Retention (ZDR) endpoints or equivalent processing options designed to minimize provider-side retention.

AI providers engaged by Re-Doc process customer information solely for the purpose of providing the requested Services and not to provide services directly to the customer.

Output Generation

Following processing, Re-Doc generates one or more output files based on the workflow selected by the customer. Depending on the requested operation, outputs may include:

• ·redacted documents;
• ·anonymized documents;
• ·pseudonymized documents;
• ·converted document formats;
• ·extracted text;
• ·processing reports; or
• ·other workflow-specific outputs.

Generated outputs are made available to the customer through the Services and are protected using the same security measures applied to uploaded documents.

Temporary Processing by Service Providers

To provide certain features, Re-Doc may engage carefully selected service providers that perform specialized processing on our behalf. These services may include:

• ·document hosting;
• ·document conversion;
• ·OCR;
• ·authentication;
• ·payment processing;
• ·analytics;
• ·AI-assisted document analysis; and
• ·infrastructure operations.

These providers process customer information only for the specific services they are engaged to perform and are selected based on technical capability, security practices, and operational reliability.

Human Access

Re-Doc is designed to process documents automatically. We do not routinely review customer documents manually. Authorized personnel may access uploaded documents only where reasonably necessary to:

• ·investigate customer-reported technical issues;
• ·provide requested customer support;
• ·investigate suspected abuse or security incidents;
• ·maintain the integrity or security of the Services; or
• ·comply with applicable legal obligations.

Access to customer information is restricted to personnel with an operational need to know and is subject to appropriate internal access controls.

Data Location

Re-Doc is operated by a company incorporated in India. Customer documents are primarily stored and processed using infrastructure located within the European Union.

Certain processing activities may be performed by carefully selected third-party service providers located in other jurisdictions where required to provide OCR, document conversion, authentication, payment processing, or AI-assisted document processing. Where such providers are engaged, Re-Doc takes reasonable steps to ensure that appropriate contractual, technical, or organizational safeguards are in place consistent with applicable law.

Customer Control

Customers remain in control of the documents they upload. Customers may:

• ·download generated outputs;
• ·delete documents before the scheduled retention period where supported;
• ·request earlier deletion through customer support; or
• ·configure shorter retention periods where available under their subscription or enterprise agreement.

Uploaded Documents and Generated Outputs

Unless a shorter retention period is agreed or a customer requests earlier deletion, uploaded documents and generated outputs are retained for up to 30 days.

After the applicable retention period, uploaded documents and generated outputs are scheduled for deletion from Re-Doc's active processing systems.

Customers may request earlier deletion, including immediate deletion where technically supported, by contacting Re-Doc support or using available deletion features within the Services.

Document Metadata

Re-Doc may retain limited document metadata for operational, audit, billing, security, and support purposes. This may include information such as:

• ·filename;
• ·file type;
• ·file size;
• ·upload timestamp;
• ·processing status;
• ·job identifier;
• ·retention schedule;
• ·account identifier; and
• ·error or processing status information.

Document metadata does not normally include the full contents of the uploaded document.

Document metadata may be retained for a longer period than the document itself where necessary for account management, billing, audit logs, dispute resolution, security investigations, or compliance with legal obligations.

Account Information

Account information is retained for as long as your account remains active or as needed to provide the Services.

If you delete your account or request account deletion, we will delete or anonymize account information unless retention is required for legal, tax, accounting, security, dispute resolution, or legitimate business purposes.

Payment and Billing Records

Payment and billing records may be retained for the period required by applicable tax, accounting, financial, and regulatory obligations.

Payment information is processed primarily by our payment service providers. Re-Doc does not store complete credit card or debit card numbers on its own systems.

Logs and Technical Records

Re-Doc may retain application logs, API logs, security logs, and diagnostic records to maintain platform reliability, investigate errors, prevent misuse, and protect the Services. These logs may include information such as:

• ·account identifier;
• ·timestamp;
• ·IP address;
• ·browser or device information;
• ·API request metadata;
• ·processing status;
• ·error messages; and
• ·operational events.

Where logs contain customer-specific information, Re-Doc may delete or anonymize such logs upon request where technically feasible and legally permitted.

Backups

Uploaded documents and generated outputs are not intentionally included in Re-Doc's code or application backups.

Re-Doc may maintain backups of application code, configuration, and operational systems for business continuity and disaster recovery purposes.

If any customer information is present in backups or replicated systems, it will be handled according to applicable retention, security, and deletion procedures.

Deletion Requests

Customers may request deletion of uploaded documents, generated outputs, account information, or related information by contacting Re-Doc.

We will respond to deletion requests within a reasonable period, subject to technical feasibility and any legal, security, tax, accounting, contractual, or compliance obligations that require continued retention.

Where immediate deletion is requested for uploaded documents or generated outputs, Re-Doc will take reasonable steps to delete the applicable files from active systems as soon as technically practicable.

Enterprise Retention Terms

Enterprise customers may agree to shorter retention periods, immediate deletion workflows, custom deletion schedules, or other retention terms through a separate written agreement, Data Processing Addendum, or enterprise subscription arrangement.

Where an enterprise agreement conflicts with this Privacy Policy, the enterprise agreement will apply to the extent of that conflict.

Transmission Security

Documents and account information are transmitted to Re-Doc over encrypted network connections using Transport Layer Security (TLS) or similar industry-standard encryption protocols.

Customers are responsible for accessing the Services through secure networks, protecting their devices, and ensuring that files downloaded from Re-Doc are stored and shared securely.

Infrastructure Security

Re-Doc hosts its primary application and document-processing infrastructure on cloud servers located within the European Union.

Uploaded documents and generated outputs are stored within access-controlled infrastructure for the limited retention period described in this Privacy Policy.

Re-Doc applies server-side access controls, infrastructure configuration controls, and operational safeguards designed to restrict unauthorized access to production systems.

Uploaded documents and generated outputs are not intentionally included in Re-Doc's code or application backups.

Access Controls

Access to production systems and customer information is restricted to authorized personnel who require access for operational, support, security, or legal purposes. Re-Doc does not routinely review uploaded documents manually. Authorized personnel may access uploaded documents or generated outputs only where reasonably necessary to:

• ·provide customer-requested support;
• ·investigate technical issues;
• ·troubleshoot failed or incomplete processing jobs;
• ·detect or prevent misuse of the Services;
• ·respond to security incidents;
• ·comply with applicable legal obligations; or
• ·protect the rights, safety, or integrity of Re-Doc, customers, or third parties.

Automated Processing by Default

Re-Doc is designed to process uploaded documents through automated workflows.

Where possible, document analysis, OCR, conversion, AI-assisted detection, redaction, anonymization, pseudonymization, and output generation are performed automatically without routine human review.

This helps reduce unnecessary human exposure to customer documents.

Data Minimization

Re-Doc aims to collect and retain only the information reasonably necessary to provide and operate the Services.

Uploaded documents and generated outputs are retained for a limited period and are scheduled for deletion according to the applicable retention period.

Document metadata, account information, billing information, logs, and technical records may be retained for longer where necessary for security, audit, billing, support, legal, or operational purposes.

Backup Practices

Uploaded documents and generated outputs are not intentionally included in Re-Doc's code or application backups.

Re-Doc may maintain backups of application code, configuration, and operational systems for continuity, recovery, and maintenance purposes.

Where any customer information is present in backups or replicated systems, it is handled according to applicable security, retention, and deletion procedures.

Subprocessor Security

Re-Doc uses third-party service providers and subprocessors for functions such as hosting, authentication, OCR, document conversion, AI-assisted processing, payments, analytics, and infrastructure operations.

We select providers based on their technical capabilities, operational reliability, and security commitments.

Where subprocessors process uploaded documents, extracted text, generated outputs, or related information, they are expected to process such information only for the purpose of providing the relevant service to Re-Doc.

AI Processing Safeguards

Where supported by the relevant provider and configuration, Re-Doc routes AI-assisted processing through Zero Data Retention or similar provider-side settings designed to limit retention of prompts, document content, and model outputs.

Re-Doc does not use uploaded documents or generated outputs to train its own artificial intelligence or machine learning models.

Re-Doc also does not permit third-party AI providers to use uploaded documents or generated outputs to train Re-Doc-specific models.

Logs and Monitoring

Re-Doc may maintain application logs, API logs, diagnostic logs, and security-related records to operate the Services, investigate technical issues, detect misuse, and protect the platform.

These logs may include operational metadata such as timestamps, account identifiers, IP addresses, API request metadata, processing status, error messages, and security events.

Where logs contain customer-specific information, Re-Doc may delete or anonymize such logs upon request where technically feasible and legally permitted.

Incident Response

If Re-Doc becomes aware of a security incident affecting customer information, uploaded documents, generated outputs, or other personal information processed through the Services, we will take reasonable steps to investigate, contain, and remediate the incident.

Where required by applicable law, contract, or enterprise agreement, Re-Doc will notify affected customers, users, regulators, competent authorities, or other relevant parties of a reportable personal data breach.

Where the Digital Personal Data Protection Act, 2023 or the Digital Personal Data Protection Rules, 2025 apply, Re-Doc will handle reportable personal data breach notifications in accordance with applicable DPDP requirements, including notifying affected Data Principals and/or the Data Protection Board of India where Re-Doc is required to do so.

Where Re-Doc processes customer-uploaded documents as a processor on behalf of a customer, Re-Doc may notify the customer of the incident and support the customer in meeting its own breach notification obligations, unless applicable law requires Re-Doc to notify directly.

Customer Responsibilities

Customers are responsible for maintaining the confidentiality of their accounts and for ensuring that they have appropriate authorization to upload and process documents through Re-Doc. Customers should:

• ·use secure devices and networks;
• ·protect access to their Google account or other authentication method;
• ·restrict access to downloaded outputs;
• ·review generated outputs before sharing or relying on them;
• ·delete documents when they are no longer needed; and
• ·promptly notify Re-Doc if they suspect unauthorized access or misuse of their account.

Security Limitations

No online service, hosting environment, transmission method, or processing system can be guaranteed to be completely secure.

While Re-Doc takes reasonable measures designed to protect customer information, we cannot guarantee that unauthorized access, cyber incidents, service interruptions, data loss, or other security events will never occur.

Essential Cookies

We use essential cookies and similar technologies that are necessary for the Services to function properly. These may be used to:

• ·keep users signed in;
• ·maintain secure sessions;
• ·prevent unauthorized access;
• ·remember basic account or interface preferences;
• ·support authentication;
• ·detect errors or misuse; and
• ·maintain platform security.

Essential cookies are required for core functionality and cannot usually be disabled without affecting the operation of the Services.

Analytics Cookies

Re-Doc uses analytics tools to understand how users interact with our website and Services. These tools may collect information such as:

• ·pages visited;
• ·session duration;
• ·browser type;
• ·device type;
• ·approximate geographic region;
• ·referring pages;
• ·feature usage;
• ·clicks, scrolling, and interaction events;
• ·performance information; and
• ·error or usability signals.

We currently use analytics providers such as Google Analytics and Microsoft Clarity. Analytics information helps us improve product usability, diagnose performance issues, understand which features are useful, and maintain a better user experience.

Microsoft Clarity

We may use Microsoft Clarity to understand how users interact with our website or application interface. Microsoft Clarity may collect usage information such as clicks, scrolling, navigation patterns, device information, browser information, and session interaction data.

We use this information to identify usability issues, improve user experience, and troubleshoot product flows.

Analytics tools are not used to intentionally process uploaded document contents.

Google Analytics

We may use Google Analytics to understand website traffic, user journeys, engagement, device information, browser information, and general usage patterns.

Google Analytics helps us understand how users discover and use Re-Doc so that we can improve the Services.

No Sale of Customer Information

Re-Doc does not sell customer information, uploaded documents, generated outputs, or document metadata.

We do not use uploaded documents or generated outputs for advertising profiling.

Marketing Cookies

Re-Doc does not currently use third-party advertising cookies for behavioral advertising.

If we introduce marketing or advertising cookies in the future, we will update this Privacy Policy or provide additional notice where required by applicable law.

Managing Cookies

Most browsers allow users to control cookies through browser settings.

You may be able to block or delete cookies through your browser; however, disabling certain cookies may affect the functionality, security, or availability of the Services.

Rights You May Have

Subject to applicable law, you may have the right to:

• ·request access to personal information we hold about you;
• ·request correction of inaccurate or incomplete personal information;
• ·request deletion of personal information;
• ·request restriction of certain processing activities;
• ·object to certain processing activities;
• ·withdraw consent where processing is based on consent;
• ·request a copy of certain information in a portable format;
• ·request information about how your personal information has been processed;
• ·submit a grievance or complaint regarding our handling of your personal information; and
• ·nominate another person to exercise certain rights on your behalf where permitted by applicable law.

These rights may be subject to limitations, exemptions, identity verification requirements, and legal or contractual restrictions.

Uploaded Documents and Third-Party Personal Information

Re-Doc is a document-processing platform. Uploaded documents may contain personal information relating to individuals other than the account holder or customer representative.

In many cases, the customer that uploads the document determines the purpose and means of processing the personal information contained within that document.

Where Re-Doc processes uploaded documents on behalf of a customer, Re-Doc generally acts as a processor or service provider. In such cases, individuals whose personal information appears in uploaded documents may need to direct their privacy rights requests to the customer that uploaded the document.

If Re-Doc receives a rights request relating to personal information contained in a customer-uploaded document, we may redirect the request to the relevant customer, seek instructions from the customer, or assist the customer in responding to the request where required by applicable law or contract.

Account Information Requests

If you have a Re-Doc account, you may request access to, correction of, or deletion of account information associated with your account.

Certain information may be retained where necessary for security, fraud prevention, tax, accounting, legal compliance, dispute resolution, contract enforcement, or legitimate business purposes.

Document Deletion Requests

Customers may request deletion of uploaded documents and generated outputs before the scheduled retention period.

Where technically supported, Re-Doc will take reasonable steps to delete the relevant uploaded documents and generated outputs from active systems as soon as technically practicable.

Document metadata, logs, billing records, and account information may be retained separately where necessary for operational, security, legal, tax, accounting, audit, or compliance purposes.

Withdrawal of Consent

Where Re-Doc relies on consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent will not affect processing that occurred before the withdrawal.

If you withdraw consent required for certain Services, some features may no longer be available.

Complaints and Grievances

If you have concerns about how Re-Doc handles your personal information, you may contact us using the contact details provided at the end of this Privacy Policy.

We will review and respond to privacy-related requests and grievances in accordance with applicable law.

Depending on your location, you may also have the right to lodge a complaint with a data protection authority or other competent regulator.

For DPDP-related communications, support@re-doc.com is the contact point authorised by Re-Doc to receive privacy requests, withdrawal requests, correction or deletion requests, nomination-related requests, and grievances relating to personal data processing.

How to Exercise Your Rights

To exercise your privacy rights, contact us at:

support@re-doc.com

To protect customer information and account security, we may need to verify your identity before responding to a request.

We may also request additional information to help us locate the relevant account, document, processing job, or transaction.

We will respond to valid requests within the timeframe required by applicable law.

Where the Digital Personal Data Protection Act, 2023 or the Digital Personal Data Protection Rules, 2025 apply, Re-Doc will aim to respond to applicable access, correction, updating, erasure, nomination, and grievance-related requests within the period required under applicable law, including the ninety-day period specified under applicable DPDP requirements where relevant.

Account and Service Information

We may process account information, authentication information, subscription information, support information, and technical information where necessary to:

• ·create and manage user accounts;
• ·authenticate users;
• ·provide access to the Services;
• ·process subscriptions and payments;
• ·provide customer support;
• ·maintain platform security;
• ·prevent misuse;
• ·comply with legal obligations; and
• ·enforce our agreements.

Depending on the context, the legal basis for this processing may include performance of a contract, compliance with legal obligations, legitimate interests, consent, or other lawful bases recognized under applicable law.

Uploaded Documents and Generated Outputs

When a customer uploads documents to Re-Doc, the customer is responsible for ensuring that it has the necessary rights, permissions, authority, and lawful basis to upload and process those documents.

Re-Doc processes uploaded documents and generated outputs primarily on the customer's instructions and for the purpose of providing the requested document-processing Services.

Depending on the customer's use case and applicable law, the customer may act as the controller, data fiduciary, business, or equivalent decision-maker for the personal information contained in uploaded documents.

Re-Doc generally acts as a processor, service provider, data processor, or equivalent role when processing uploaded documents on behalf of a customer.

Consent-Based Processing

Where processing is based on consent, the person providing consent may withdraw that consent at any time, subject to applicable law and the limitations described in this Privacy Policy.

Withdrawal of consent does not affect processing that occurred before consent was withdrawn.

Legitimate Business Purposes

Where permitted by applicable law, Re-Doc may process certain information for legitimate business purposes, including:

• ·maintaining and improving the Services;
• ·securing the platform;
• ·preventing fraud, abuse, and misuse;
• ·diagnosing errors;
• ·responding to support requests;
• ·maintaining audit and operational records;
• ·enforcing contractual rights; and
• ·protecting Re-Doc, customers, users, and third parties.

Legal Obligations

Re-Doc may process and retain certain information where necessary to comply with applicable legal, tax, accounting, regulatory, law-enforcement, dispute-resolution, or contractual obligations.

Customer Responsibility

Customers are responsible for ensuring that their use of Re-Doc, including the upload and processing of documents containing personal, confidential, sensitive, regulated, or third-party information, complies with applicable laws and obligations.

This includes obtaining any required consents, authorizations, notices, approvals, or legal bases before uploading documents to the Services.