Legal

Privacy & Data Protection

Version 2026-06-29 · India Digital Personal Data Protection Act, 2023 (DPDP)

docuQ turns your documents into cited answers. This notice explains, in plain language, what personal data we process, why, who we share it with (including outside India), how long we keep it, and the rights you have as a Data Principal.

1. What we collect

  • Account data: Email address, name (optional), hashed password.
  • Content you upload: Documents, the text extracted from them, and the chat history you create.
  • Usage & technical data: Page/query counts for billing, IP address and timestamps for security and rate-limiting.

2. Why we process it (purposes)

To create and secure your account, store and retrieve your documents, generate answers with citations, meter usage for billing, and protect the service from abuse. We process this data on the basis of the consent you give at sign-up; you can withdraw it at any time.

3. Who we share it with — cross-border processing

To generate answers and embeddings, parts of your data are sent to the third-party AI/GPU processors below. Some are located outside India. We share only what each step needs, over encrypted connections, and never sell your data.

ProcessorPurposeRegionData sent
DeepSeekGenerating cited answers (LLM)China (CN)Your chat query + retrieved document excerpts
Modal (BGE-M3 / reranker / Docling)Embeddings, reranking, PDF text extractionUnited States (US)Document text + chat queries
OpenRouterFallback LLM routing (only if DeepSeek is unavailable)United States (US)Your chat query + retrieved document excerpts

If your documents contain sensitive personal data and you need a data-localised deployment, contact us before uploading — an India-region / self-hosted processing path can be arranged.

4. How long we keep it (retention)

  • Account, documents, and knowledge bases: kept while your account is active; erased when you delete your account or withdraw consent.
  • Chat history: automatically deleted after 3 days.
  • Email verification / password-reset tokens: deleted as soon as they are used or expire.

5. Your rights as a Data Principal

  • Access / export (§11): Settings → Account → “Export my data”, or email us.
  • Correction (§12): Edit your profile in-app, or email us for content corrections.
  • Erasure (§12): Settings → Account → “Delete account” permanently erases your account and everything you own.
  • Withdraw consent (§6): Settings → Account → “Withdraw consent”. You can then delete your account to erase your data.
  • Grievance (§13): Contact our Grievance Officer at privacy@docuq.test.

6. Children

docuQ is a business product intended for users aged 18 and over. We do not knowingly process the personal data of children. You confirm you are 18+ when you sign up.

7. Grievance Officer & contact

For any question, request, or grievance about your personal data, contact our Grievance Officer:

privacy@docuq.test

We aim to acknowledge requests within 72 hours and resolve them within the timelines prescribed by the DPDP Act.