Privacy Policy

1. Who We Are

Docuvera is operated by Pavlenko Consulting OÜ, a company registered in Estonia (registry code 16948498). When this policy refers to "Docuvera," "we," "us," or "our," it means Pavlenko Consulting OÜ.

2. Data We Collect

• Account information — email address and optional display name you provide when signing up.
• Documents — files you upload for analysis. These are stored in your private storage bucket and are never shared with other users.
• Analysis data — AI-generated metadata such as classifications, summaries, extracted text, and entities derived from your documents.
• Chat history — conversations you have with the AI assistant about your documents.
• Usage data — basic analytics including page views and feature usage to improve the product.

3. How We Use Your Data

• To provide and operate the Docuvera service, including document analysis and AI chat.
• To authenticate your identity and secure your account.
• To enforce plan-based limits and billing.
• To communicate service updates, security notices, and support responses.
• To improve the product based on aggregated, anonymized usage patterns.

4. Third-Party Processors

We use the following services to operate Docuvera:

• Supabase (database, authentication, file storage) — hosted in the EU.
• Vercel (application hosting and edge network).
• Anthropic / Google — AI model providers used to analyze documents and power chat. Document content is sent to these providers for processing and is not retained by them for model training.
• Google Drive API — only when you explicitly connect your Google Drive account to import files.

5. Data Storage and Security

Your data is stored in Supabase-managed infrastructure with row-level security policies ensuring that users can only access their own data. Documents are stored in isolated storage buckets. All data is encrypted in transit (TLS) and at rest.

6. Data Retention

We retain your data for as long as your account is active. When you delete a document, it is permanently removed from storage and the database. When you delete your account, all associated data (profile, documents, analyses, conversations) is permanently deleted.

7. Cookies

Docuvera uses only essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise any of these rights, contact us at privacy@getdocuvera.com.

9. Children

Docuvera is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the email associated with your account. Continued use of the service after changes constitutes acceptance.

11. Contact

Pavlenko Consulting OÜ
Tallinn, Estonia
privacy@getdocuvera.com