Privacy Policy

Information We Collect

When you use Dokyumi, we collect the following information:

• Account Information: Email address, name, and billing details when you create an account
• Documents: Files you upload are collected and stored for processing and account history until an applicable deletion request is processed
• Usage Data: API calls, extraction counts, schema configurations, and performance metrics
• Technical Data: IP addresses, browser information, and device identifiers
• Communication Data: Support messages and feedback you send us

How We Use Your Information

We use your information to:

• Process your documents and provide extraction results
• Manage your account, billing, and API access
• Monitor usage and enforce rate limits
• Improve our service quality and accuracy
• Send important service updates and security notifications
• Provide customer support
• Comply with legal obligations

Document Security and Retention

Here's how we currently handle your documents and extraction records:

• Documents are processed in secure, encrypted environments
• Uploaded files are stored in encrypted Cloudflare R2 storage and are not automatically purged on a fixed schedule
• Extracted data is stored in your account's extraction history
• Self-service deletion is not currently available; contact hello@dokyumi.com to request deletion and confirm the applicable scope and timing
• We do not use your document content for training or improving our AI models
• Document content is disclosed to the service providers listed below only as needed to operate the service, and as required by law

Cookies and Tracking

We use cookies and similar technologies for:

• User authentication and session management (via self-hosted Better Auth)
• Basic analytics to understand how our service is used
• Remembering your preferences and settings

Optional browser analytics is off until you accept. Global Privacy Control and Do Not Track keep it off. You can change or withdraw that choice below without affecting authentication.

Separately, authenticated API and upload-portal requests emit a minimal operational funnel receipt. It uses a one-way pseudonymous organization actor and a pseudonymous extraction journey, with no email, filename, document content, schema name, raw organization or extraction ID, URL query, or referrer. GeoIP and person profiles are disabled. This lets us recover start, completion, failure, abandonment, and time-to-value receipts from durable extraction state. Signed Stripe checkout events are queued without copying customer or checkout payloads into the analytics outbox and retried by an authenticated scheduled job when delivery is temporarily unavailable.

Third-Party Services

We use the following trusted third-party services to operate Dokyumi:

• Neon: Managed Postgres database hosting for your account data, schemas, and extraction records
• Cloudflare R2: Encrypted object storage for uploaded documents
• Mistral: OCR (text and layout extraction from your documents)
• OpenRouter / Anthropic: AI-powered document extraction and field mapping
• Stripe: Payment processing and billing (PCI-DSS compliant)
• Vercel: Application hosting and content delivery
• Resend: Transactional and service-notification email delivery
• PostHog: Optional consent-gated browser analytics and pseudonymous operational funnel delivery with person profiles and GeoIP disabled

Meta/Facebook browser tracking is disabled in this release. These services have their own privacy policies and security measures. We share only the minimum necessary information with these providers.

International Data Transfers

Your data may be processed and stored in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correct: Request correction of inaccurate personal data
• Delete: Request deletion of your personal data
• Portability: Request export of your data in a portable format
• Restrict: Request limitation of processing under certain circumstances
• Object: Object to processing based on legitimate interests

To exercise these rights, contact us at hello@dokyumi.com. We'll respond within 30 days of receiving your request.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable laws.

Children's Privacy

Dokyumi is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or through our service. Continued use after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us at: