Privacy Policy - Docgrit

Last updated: May 2026

Company: Docgrit

Contact: hello@docgrit.com

1. Introduction

Docgrit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at docgrit.com.

2. Information We Collect

Personal Information

When you create an account, we collect:

Email address (required for account creation)
First and last name (optional)
Password (securely hashed — we never store plaintext passwords)
Billing information (for paid plans, handled by our payment provider)

Usage Information

We automatically collect certain information about your use of our service:

IP address and browser information
Pages visited and features used
Time spent on the service
Error logs and performance data

API Specification Files

When you upload API specification files, we process them to generate documentation. Your files are stored securely in encrypted cloud storage and are only accessible to you and our systems. Generated documentation is served exclusively through your account and any share links you create.

3. How We Use Your Information

Provide and maintain our service
Process your API specifications and generate documentation
Manage your account and billing
Send important service updates and security notifications
Improve our service and develop new features
Provide customer support
Comply with legal obligations

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. To operate the service, we share limited data with the following categories of trusted providers — each bound by confidentiality obligations:

Cloud infrastructure

Secure hosting, database, and encrypted file storage for your account and documents

Payment processing

Handles billing for paid plans — your card details are never stored on our servers

Email delivery

Sends transactional emails (welcome, billing confirmations, usage alerts)

AI inference

Powers the endpoint explanation feature (Pro) — only endpoint text is processed, no personal data

Analytics

Anonymized usage metrics to help us improve the product — no personally identifiable data

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

5. Data Security

We implement industry-standard security measures to protect your information:

All data in transit is encrypted — we enforce HTTPS across the entire service
Passwords are securely hashed before storage — plaintext is never retained
Per-account data isolation — your data is only accessible to you
Secure, time-limited authentication sessions
Cryptographic verification of all payment events
Automated rate limiting and abuse prevention on sensitive operations
Regular security reviews and dependency updates

6. Data Retention

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements.

Uploaded API specification files and generated documentation are retained for the lifetime of your account. If you delete your account, your data is deleted from our systems within 30 days.

7. Your Rights

You have the right to:

Access and review your personal information
Correct inaccurate or incomplete information
Delete your account and all associated data
Export your data in a portable format
Opt out of non-essential communications

To exercise these rights, contact us at hello@docgrit.com or manage your account from your dashboard settings.

8. Cookies and Tracking

We use cookies and similar technologies to maintain your login session, remember your preferences, analyze usage patterns, and improve service performance.

You can control cookie settings through your browser, though disabling cookies may affect service functionality such as staying logged in.

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be stored and processed in countries other than your own (primarily the US, where our infrastructure providers operate). We ensure such transfers comply with applicable data protection laws and implement appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our service. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Information

If you have questions about this Privacy Policy or our data practices, reach us at:

Email: hello@docgrit.com
Subject line: Privacy Policy Inquiry

Summary

We collect only the information necessary to provide our service, protect it with industry-standard security measures, and never sell your personal information to third parties. You maintain full control over your data and can delete your account at any time.