Privacy Policy

1. Introduction

GxpDocs.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered document generation platform (the "Service"). Please read this policy carefully to understand our practices regarding your data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, and password when you register
• Payment Information: Billing address and payment details (processed securely by our payment provider, Stripe)
• Document Content: Text, data, and files you upload or create using the Service
• Communications: Information you provide when contacting our support team

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Send transactional emails (account verification, password resets, billing)
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. AI Processing

Our Service uses third-party AI providers (such as OpenAI and Anthropic) to power document generation features. When you use AI features:

• Your input text is sent to AI providers for processing
• We do not use your content to train AI models
• AI providers process data according to their respective privacy policies and data processing agreements
• We recommend not including sensitive personal information in AI-generated content

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties that help us operate the Service (hosting, payment processing, email delivery, AI processing)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Regular security assessments
• Access controls and authentication requirements

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We retain certain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@gxpdocs.ai.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by relevant authorities.

10. GDPR Compliance (EEA Users)

If you are in the European Economic Area, our legal bases for processing your personal data include:

• Contract: Processing necessary to provide the Service
• Legitimate Interests: Processing for our legitimate business interests
• Legal Obligation: Processing required by law
• Consent: Processing based on your consent

You have the right to lodge a complaint with your local data protection authority.

11. CCPA Compliance (California Users)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information as defined by the CCPA.

12. Cookies

We use essential cookies for authentication and security. We may use analytics cookies to understand how users interact with the Service. You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

13. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected personal information from a child, we will delete that information promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: