Your Privacy Matters

We collect the following types of information when you use DocAssist:

Account Information: When you register, we collect your full name (optional), email address, and a securely hashed password. We never store passwords in plain text.

Profile Information: Data you choose to enter or extract into your DocAssist profile, such as your CNIC number, date of birth, education history, passport details, contact information, and similar fields used for form filling.

Documents You Upload: Files you upload to your Document Vault (such as CNIC, passport, degree certificates, or bank statements) for storage and optional AI-based data extraction.

Usage & Payment Status: We track feature usage counts (such as the number of AI scans, form fills, and Ready Answers used per month) and your Pro subscription status, to enforce plan limits.

Device & Browser Data: We may collect your browser type, operating system, and IP address for security and abuse-prevention purposes.

Your information is used exclusively to provide and improve DocAssist. Specifically, we use it to:

• Create and manage your account
• Store your documents in My Documents
• Process documents you choose to extract, using AI, to auto-fill your profile
• Auto-fill forms and generate Ready Answers using your saved profile data
• Track usage against your plan's monthly limits
• Verify and activate your Pro subscription after payment
• Send service-related emails (such as account confirmation or password reset)
• Diagnose errors and improve reliability
• Protect against fraud, abuse, and unauthorized access

DocAssist saves your uploaded documents so you can reuse them later. This works differently from a simple "scan and discard" tool, and it is important you understand how it works:

• Documents are saved, not discarded: Files you upload to My Documents (CNIC, passport, degree, bank statement, etc.) are kept in secure private storage until you choose to delete them. They are not automatically deleted after extraction.
• You control deletion: Every document in your Vault has a Delete option. Deleting a document permanently removes it from storage.
• AI extraction is optional and on-demand: Extraction only happens when you click "Extract" on a specific document. At that point, the document is sent to our AI processing service solely to read the data fields on it.
• Extracted fields are saved separately: Once extracted, the resulting text fields (such as your name, CNIC number, or degree title) are saved in your profile, separate from the original document file.
• Access control: Documents are stored in private, access-controlled storage. Only you, while logged into your own account, can view or download your own documents.

Because documents persist until you delete them, please only upload documents you are comfortable storing in your account and remove any document from My Documents once you no longer need it there.

DocAssist stores user account data, your Document Vault, and extracted profile fields using Supabase, which provides industry-standard security including encryption at rest and in transit.

We implement the following safeguards:

• HTTPS/TLS encryption on all data in transit
• Supabase Authentication for secure login and password handling
• Row Level Security (RLS) policies, so each user can only read or modify their own data
• Private document storage with short-lived, signed access links rather than public file URLs
• File type verification on upload to reduce the risk of malicious files
• AI processing credentials are never exposed in client-side code

No security system is perfect. While we take strong measures to protect your data, we cannot guarantee absolute security against all threats.

DocAssist uses third-party AI models to read documents and identify form fields. Please understand the following before relying on AI output:

• AI can make mistakes. Text extraction, date formatting, field matching, and form-field detection are performed by an AI model and may contain errors, omissions, or misreadings — particularly with handwriting, low-quality scans, or unusual document layouts.
• You must review before use. Always manually check extracted data and auto-filled form values against your original documents before submitting them anywhere, especially for official, legal, financial, academic, or visa-related forms.
• No liability for AI errors. DocAssist, its developer, and affiliated services are not responsible for any loss, rejection, delay, financial harm, or other consequence resulting from inaccurate AI extraction, incorrect auto-fill, or misuse of generated data. Responsibility for verifying and submitting accurate information rests entirely with you.
• Document images sent for AI extraction are transmitted securely to our AI processing provider solely to perform the requested extraction, and are not used to train AI models.

DocAssist integrates with the following third-party services, each governed by their own privacy policies:

We only share data that is strictly necessary for each service to function. We do not share your data with advertisers or data brokers.

DocAssist's Pro plan is currently activated manually: you send payment via Easypaisa and confirm via WhatsApp, after which your account is upgraded. We do not collect or store your Easypaisa account number, card details, or any banking credentials. Payment confirmation is limited to the receipt screenshot you voluntarily share with us over WhatsApp for verification purposes.

We retain your data for as long as your account is active, with the following specifics:

• Account data: Retained until you delete your account
• Saved documents: Retained until you manually delete them, or until you delete your account
• Extracted profile data: Retained until you edit, clear, or delete it, or close your account
• Usage/log data: Retained for up to 90 days for debugging and abuse prevention
• After account deletion: All personal data, including Vault documents, is permanently deleted within 30 days

To request deletion of your account or specific data, contact us using the details in Section 13, or use the in-app Delete options for individual documents.

You have the following rights with respect to your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Update or correct inaccurate information in your profile at any time
• Deletion: Delete individual Vault documents yourself, or request permanent deletion of your entire account and all associated data
• Portability: Request your extracted profile data in a machine-readable format (JSON)
• Withdrawal of consent: Stop using the service and request data deletion at any time

To exercise any of these rights, contact us at husseyah1212@gmail.com. We will respond within 7 business days.

DocAssist uses minimal cookies and browser storage. Specifically:

• Authentication session: Supabase manages a secure session so you stay logged in. This is essential for the service to function.
• Local usage cache: A small amount of usage-count data may be cached in your browser's local storage for faster loading, but the database is always the source of truth.
• No advertising cookies: We do not use any advertising or marketing trackers.
• No third-party analytics trackers: We do not use Google Analytics or similar cross-site tracking services.

Clearing your browser's site data will log you out of DocAssist.

DocAssist is intended for users aged 18 and above. Our service involves official identity documents such as CNICs and passports which are issued to adults. We do not knowingly collect personal information from minors.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Your continued use of DocAssist after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or your data, please reach out: