Effective Date: April 19, 2026 | Last Updated: May 3, 2026
This Privacy Policy describes how DocDoctor ("we," "us," "our"), operated by Phillip Knowles and available at docdoctor.info, collects, uses, stores, and protects your information when you use our document-conversion service ("Service"). We are committed to protecting your privacy and handling your data transparently.
When you create an account (via Amazon Cognito), we collect:
When you use the Service, you upload files (documents, spreadsheets, images, etc.) for conversion. We process these files to generate your requested outputs. We do not read, analyze, or use the content of your files for any purpose other than providing the conversion service.
For each conversion job, we store:
If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We receive and store:
We never see, store, or process your credit card number, CVC, or full billing address. That data lives solely within Stripe's PCI-DSS compliant infrastructure.
We collect standard server-side logs via AWS CloudWatch and API Gateway, including:
We do not use third-party analytics trackers, advertising pixels, or social-media tracking scripts. We do not use cookies for tracking. Session authentication uses browser sessionStorage only.
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Provide the conversion service | Uploaded files, job metadata | Contract performance |
| Authenticate your account | Email, user ID, tokens | Contract performance |
| Process payments | Stripe customer/subscription IDs | Contract performance |
| Enforce usage quotas | Plan, monthly doc count | Contract performance |
| Monitor and debug the Service | Logs, error data, job metadata | Legitimate interest |
| Respond to support inquiries | Email, job metadata | Legitimate interest |
| Display aggregate site statistics | Anonymized job counts and sizes | Legitimate interest |
| Operate the referral program | Referral code, referral counts, commission balance, PayPal email (if provided) | Contract performance / Legitimate interest |
| Process referral payouts | PayPal email address (if provided), commission amount | Contract performance |
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Uploaded files (S3) | 24 hours | S3 lifecycle expiration |
| Generated outputs (S3) | 24 hours | S3 lifecycle expiration |
| Job metadata (DynamoDB) | 7 days | DynamoDB TTL auto-delete |
| User account data (DynamoDB) | Until account deletion | Manual request |
| Referral commission balance & PayPal email | Until account deletion or explicit removal | Manual request |
| CloudWatch logs | 30 days | Log group retention policy |
| Stripe subscription data | Per Stripe's retention policy | Managed by Stripe |
We do not create backups of your uploaded files or outputs beyond the retention windows listed above.
We implement multiple layers of encryption and access control:
If you participate in the DocDoctor referral program, we collect and store the following additional data:
We use PayPal, Inc. as a payment processor for referral commission payouts. When a payout is initiated, we transmit your PayPal email address and payout amount to PayPal's API. PayPal's own Privacy Policy governs how they handle this data.
We do not sell, rent, or share your personal data with third parties for their marketing purposes. Data is shared only with the following service providers, strictly as needed to operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, storage, compute, auth, CDN | All service data (processed within AWS US-East-1 region) |
| Stripe | Payment processing | Stripe customer ID; Stripe manages all card data directly |
We do not use any advertising networks, social-media SDKs, or analytics providers that would receive your data.
We do not use your uploaded Content, generated Outputs, or any personal data to train, fine-tune, or improve machine-learning models, artificial intelligence systems, or algorithmic products — whether our own or any third party's. Your files are processed, delivered, and deleted. Period.
Depending on your jurisdiction, you may have the following rights:
In addition to the above, you have the right to:
Our lawful bases for processing are contract performance (providing the Service you signed up for) and legitimate interest (maintaining service reliability and security).
To exercise any of these rights, email us at support@docdoctor.info. We will respond within 30 days (or within any shorter timeframe required by applicable law).
The Service is hosted on AWS in the US-East-1 (N. Virginia) region. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We rely on AWS's compliance certifications (including SOC 2, ISO 27001, and participation in the EU-US Data Privacy Framework) to ensure adequate protection of transferred data.
The Service is not directed at children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.
DocDoctor does not use cookies for tracking, analytics, or advertising. We use browser sessionStorage to store authentication tokens for the duration of your browser session. No data is stored in localStorage that persists beyond your session, except a temporary file reference for the conversion flow.
In the unlikely event of a data breach that affects your personal data, we will:
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last Updated" date. If changes are material, we will make reasonable efforts to notify registered users. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
For questions, concerns, or data-rights requests:
See also: Terms of Service