Privacy Policy

01 Introduction

Welcome to Docuview ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at docuview.ai, our real estate disclosure packet software at app.docuview.ai, and related services (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

02 Information we collect

2.1 Personal information

We may collect the following types of personal information:

• Account information: Name, email address, phone number, company name, and professional credentials
• Profile information: Profile picture and real estate license information
• Communication data: Comments, questions to Doc (our AI assistant), emails, and other communications sent through our platform
• Transaction data: Information related to offers and property transactions
• Payment information: Payment method details processed through our third-party payment processor (we do not store full credit card numbers)

2.2 Property and listing information

We collect information related to property listings, including:

• Property details, descriptions, and specifications
• Property images, documents, and disclosures
• Listing activity and performance metrics
• Client and prospect information related to listings

2.3 Technical information

We automatically collect certain technical information:

• IP address, browser type, and device information
• Activity on packets, such as when you open a packet or document, which pages you read and for how long, and what you download
• Log files
• Essential cookies (see Section 7)

03 How we use your information

We use the collected information for the following purposes:

• Service provision: To provide, maintain, and improve the Service
• Communication: To send packets, invitations, and notifications by email, and to let the members of a team comment on documents for one another
• Transaction management: To process offers and document sharing
• Activity: To show the professionals on a packet's listing side who has opened the packet, what each person has read or downloaded and for how long, and who is viewing it now
• AI features: To power AI-assisted document analysis, answers to questions about documents, and reading of offer terms (your content is processed by AI but is never used to train AI models)
• Cover sheet: To print the listing agent's name, phone number, email address, license number, and brokerage on the cover sheet of each packet they list
• Support: To provide customer support and respond to inquiries
• Marketing: To send people who have a Docuview account emails about Docuview, which they can unsubscribe from at any time
• Security: To protect against fraud, abuse, and security threats
• Legal compliance: To comply with applicable laws and regulations

04 Information sharing and disclosure

4.1 With your consent

We may share your information with third parties when you provide explicit consent.

4.2 Service providers

We may share information with trusted third-party service providers who assist us in operating our platform, including:

• Cloud hosting and storage: We use secure cloud infrastructure for data storage and application hosting
• Maps: When a packet has no photo, the Service shows a map of the property's address from Google Maps Platform. Your browser loads the map directly from Google, which receives the address and your IP address and may use and retain them to provide and improve its own products and services, under the Google Privacy Policy
• Payment processing: Stripe, Inc. processes payments and billing information on our behalf
• Email delivery: Mailgun provides email delivery services for transactional emails, notifications, and support communications
• Marketing email: Mailchimp sends our marketing emails to people who have a Docuview account
• AI service providers: Third-party AI service providers that power our document analysis and insights features (these providers process your content solely to provide the Service and do not use it for their own purposes)
• Error monitoring: Sentry receives details of errors in the Service, including the request and IP address involved, so we can find and fix problems
• Customer support: Tools and platforms that help us provide customer support
• Bot protection: Cloudflare, Inc. checks the contact form on our website for bots with Cloudflare Turnstile, which processes your IP address and signals from your browser, such as its user agent, and does not read what you write in the form. Cloudflare also uses these signals to improve its bot detection, as described in its Turnstile Privacy Addendum

Except as described above for Google Maps Platform and Cloudflare Turnstile, all service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.3 Legal requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

4.4 Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

05 Data security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit using TLS/SSL protocols and at rest using industry-standard encryption
• Access controls: Strict access controls, multi-factor authentication, and role-based permissions limit who can access your data
• Regular audits: Regular security audits and vulnerability assessments
• Employee training: Ongoing security training for all employees with access to personal information
• Incident response: Comprehensive incident response and breach notification procedures

5.1 Data breach notification

In the event of a data breach that affects your personal information, we will notify you without undue delay and within the timeframes required by applicable law (typically within 72 hours of discovery for GDPR and as required by applicable state laws). Notifications will be sent via email to the address associated with your account and may also be posted within the Service. The notification will include:

• The nature of the breach and the types of information affected
• The measures we have taken or will take to address the breach
• Recommendations for steps you can take to protect yourself
• Contact information for further inquiries

While we strive to protect your personal information, no method of transmission or storage is 100% secure. You acknowledge that you provide information at your own risk.

06 Your rights and choices

Depending on your location, you may have the following rights:

• Access: Request access to your personal information and receive a copy of the data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request a copy of your data in a portable, machine-readable format (JSON or CSV)
• Opt-out: Opt-out of certain data processing activities, including marketing communications and non-essential cookies
• Withdraw consent: Withdraw consent for data processing where applicable
• Object to processing: Object to processing of your personal information for certain purposes
• Restrict processing: Request restriction of processing in certain circumstances
• Opt-out of AI processing: Opt-out of AI processing for certain features (note: this may limit Service functionality)

To exercise these rights, please contact us at [email protected] or [email protected]. We will respond to your request within 30 days (or as required by applicable law). You will not be discriminated against for exercising any of these rights.

07 Cookies and tracking technologies

We use only essential cookies, plus your browser's local storage to remember display choices. We do not use analytics, advertising, or marketing cookies:

• Essential cookies: Required for basic platform functionality, including session management, authentication, and security features. On our website, only the contact form uses cookies: our session cookie that protects the form, and any strictly necessary cookies Cloudflare Turnstile uses for its bot check (see Section 4.2). These cookies cannot be disabled.
• Preferences stored in your browser: The Service uses your browser's local storage to remember display choices, such as whether a side panel is open. They stay on your device and are not sent to us.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit Service functionality. Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

7.1 Do Not Track

Some browsers include a "Do Not Track" (DNT) feature that signals websites you visit that you do not want your online activity tracked. We currently do not respond to DNT signals, but we provide you with choices about data collection as described in this Privacy Policy.

08 Data retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records as required by law

When information is no longer needed, we securely delete or anonymize it.

8.1 Specific retention periods

We maintain different retention periods for different types of data:

• Account information: Retained for the duration of your active account plus 30 days after account closure (unless longer retention is required by law)
• Comments and communications: Retained for the duration of your active account plus up to 7 years after account closure for compliance and legal purposes
• Transaction records: Retained for at least 7 years to comply with tax and financial regulations
• Property listings: Retained while the listing is active, plus up to 3 years after archival for historical reference
• Payment records: Retained for 7 years for tax and accounting purposes
• Support communications: Retained for 3 years from the date of last contact
• Activity records: Retained for as long as the packet they relate to

8.2 Comment monitoring and access

Comments and questions to Doc are stored on our servers and may be accessed by authorized personnel for the following purposes:

• Compliance monitoring: To ensure compliance with these Terms, applicable laws, and real estate industry regulations
• Security and fraud prevention: To detect and prevent fraud, abuse, and security threats
• Legal requirements: To comply with valid legal process, court orders, or government requests
• Customer support: To investigate and resolve support requests or disputes

Access to comments and questions is strictly limited to authorized personnel on a need-to-know basis. They are encrypted in transit and at rest. We do not use automated tools to read them for advertising purposes.

09 International data transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Other legally recognized transfer mechanisms

10 Artificial intelligence and automated decision-making

10.1 AI processing of user content

Our Service uses artificial intelligence to provide document analysis, answers to questions about documents, and reading of offer terms. When you use AI features:

• Processing purpose: Your content (documents, questions to Doc, property information) is processed by AI solely to provide the requested feature or service
• No training use: Your documents and data are never used to train or improve AI models
• Third-party AI providers: We use third-party AI service providers who are contractually prohibited from using your content for their own purposes
• Data retention: AI processing is performed in real-time or near real-time, and your content is not retained by AI providers longer than necessary to provide the service
• Accuracy disclaimer: AI-generated outputs may contain errors or inaccuracies and should not be relied upon without independent verification

10.2 Automated decision-making

We do not use AI or automated systems to make decisions that significantly affect you without human oversight. Any AI-generated recommendations, insights, or analysis are advisory only and do not automatically trigger actions affecting your account, listings, or transactions, except that Doc fills in a packet's blank property details and an offer's terms from their documents, which the professionals on the team that owns the packet or the offer can correct.

10.3 Your AI rights

You have the right to:

• Opt-out of AI processing for non-essential features (note: this may limit functionality)
• Request human review of any AI-generated content or recommendation
• Understand how AI systems process your information
• Challenge or request corrections to AI-generated outputs

To exercise these rights, contact us at [email protected].

11 Children's privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

12 California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.

12.1 Categories of information we collect

We collect the following categories of personal information as defined by the CCPA:

• Identifiers (name, email, phone number, IP address)
• Commercial information (transaction history, purchase details)
• Professional information (real estate license, credentials)
• Internet or network activity (usage data, browsing history on our Service)
• Geolocation data (IP-based location)
• Audio, electronic, visual, or similar information (profile photos, property photos, uploaded documents)
• Inferences drawn from the above to create a profile about preferences and characteristics

12.2 Sale and sharing of personal information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We only share information with service providers as necessary to provide the Service, as described in Section 4.2.

12.3 Your California privacy rights

California residents have the right to:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete: Request deletion of your personal information (subject to certain exceptions)
• Right to correct: Request correction of inaccurate personal information
• Right to opt-out: Opt-out of the sale or sharing of your personal information (not applicable as we do not sell information)
• Right to limit: Limit the use of sensitive personal information (we do not use sensitive information beyond what is necessary to provide the Service)
• Right to non-discrimination: Not be discriminated against for exercising your CCPA rights

12.4 How to exercise your California rights

To exercise your California privacy rights, please:

• Email us at [email protected]
• Contact us through our contact page

We will verify your identity before processing your request and will respond within 45 days. You may designate an authorized agent to make a request on your behalf by providing written authorization.

12.5 Shine the Light law

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for direct marketing purposes. We do not disclose your personal information to third parties for their direct marketing purposes without your consent.

13 Changes to this privacy policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Providing notice through our platform

Your continued use of our Service after changes become effective constitutes acceptance of the updated policy.

14 Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: