Privacy policy.

This privacy policy explains what DocGenie Inc. ("DocGenie," "we," "us," or "our") collects about you, where it comes from, how we use it, who we share it with, how long we keep it, and the choices you have. It covers the website at docgenie.cloud, the DocGenie app at app.docgenie.cloud, and our sales and support contact with you (together, the "Services"). The Cookie Notice and the Your Privacy Choices page are part of this policy.

DocGenie retrieves bank statements and other financial documents from the institutions a customer connects and delivers them to the customer's cloud storage. That means we hold information most websites never touch: financial-account credentials, access tokens, and the statements themselves. This policy says plainly what we do with them.

Summary of key points

• What we collect. Your name, email address, and password for your DocGenie account; payment details, which Stripe holds for us; the credentials or access tokens for the financial accounts you connect; the statements and documents we retrieve; and information about how you use the website and the app.
• Sensitive personal information. Yes, we process it. A financial-account login together with its password is sensitive personal information under California law. We use it only to retrieve documents at your direction. We encrypt it, delete it when the account is disconnected, and never sell it, share it for advertising, or use it for anything else.
• Information from other sources. Yes. The firm that invited you, financial institutions and data-access networks, Stripe, identity-resolution partners that match website visitors to business contact details, and HubSpot, which adds company details to contact records.
• Two roles. For your account, billing, website, and marketing information, we decide how it is used. For Customer Data, the DocGenie customer that connected the account decides, and we act as its service provider.
• Sharing. Advertising partners receive identifiers and browsing activity from the website and the app, and identity-resolution partners receive them from the website. California law calls that "sharing," and you can opt out on the Your Privacy Choices page or by sending the Global Privacy Control signal. Customer Data never goes to those partners.
• Your rights. You can access, correct, delete, or export your information and opt out of marketing and tracking. Section 10 explains how.

1. Who this policy covers, and our two roles

This policy applies to everyone who uses the Services: visitors to the website, registered customers and their staff, and people who connect a financial account through a link a customer sent them ("connected account owners"). The Terms of Service define "Customer Data" as the documents, statements, transaction records, account information, and credentials retrieved, received, or processed through the Services in connection with the financial accounts a customer connects. This policy uses the same definition.

We have two roles.

• For everything other than Customer Data, we decide why and how your information is processed. Privacy laws call that role a "business" or "controller." It covers your account and billing details, your messages to us, and the usage and tracking information described in sections 2 and 6.
• For Customer Data, the DocGenie customer that connected the account, or sent the link through which it was connected, decides. We process Customer Data only on that customer's instructions, as its service provider, under the "Connected accounts" and "Customer Data and feedback" sections of the Terms of Service. We do not sell Customer Data, use it for advertising, or use it to train machine-learning models. If this policy and those sections ever differ about Customer Data, the Terms of Service control.

If you are a connected account owner, the firm that sent you the link is responsible for how it uses the documents retrieved from your account. Requests to see, correct, or delete those documents go to the firm, and we help the firm respond. You can ask us directly to disconnect your account at any time by emailing us at hello@docgenie.cloud, and we disconnect it within five business days.

The Services are hosted in the United States and are intended for use in the United States. If you use them from elsewhere, your information is transferred to and processed in the United States.

2. What we collect

Information you give us

• Account details. Your name, email address, password, and firm name when you register.
• Payment details. Your card number, expiry date, security code, and billing address go directly to Stripe, our payment processor. We see the card brand, the last four digits, the billing address, and the payment status, never the full card number.
• Financial-account credentials and access tokens. When a connection is made with a username and password, we store that credential, encrypted, and use it to retrieve documents. When an institution supports direct authorization, you authorize access at the institution or in the data-access network's own connection window, and we receive a read-only access token instead; the credential never reaches us. Credentials and tokens are sensitive personal information and are part of Customer Data.
• Connection and delivery settings. The institutions and accounts you connect, the names you give them, how often to retrieve, and the cloud storage destination you connect.
• Messages and calls. Anything you send us by email, chat, the contact form, or the feedback board, and the notes we take on a sales or support call. When we tell you at the start of a call that it is being recorded, we keep the recording and transcript as well.

Information we retrieve for you

Retrieved documents. Bank, credit-card, and other statements, bills, invoices, and the account details and transaction records they contain, retrieved from the institutions you or your firm connect. Retrieved documents are Customer Data.

Information collected automatically

When you use the website or the app, we and the vendors named in section 5 collect:

• Device and connection data. IP address, the approximate location derived from it, browser and operating system, screen size, language, and the page that referred you.
• Usage data. Pages and screens viewed, links clicked, features used, time on page, errors, and crash reports. In the app, this includes the actions you take, such as adding a connection, but not the contents of the documents retrieved.
• Session recordings. Microsoft Clarity records how you move through pages on the website and in the app, with all text masked, so we can see where people get stuck.
• Device fingerprint. In the app, FingerprintJS Pro combines device and browser characteristics into an identifier so we can recognize a device and stop account takeover and abuse.
• Cookies and similar technologies. Described in the Cookie Notice.

We do not collect your gender, date of birth, race, religion, health information, or other protected characteristics, and we do not collect biometric information. A device fingerprint identifies a device, not a person's body.

3. Where it comes from

• You, when you register, connect an account, pay, or write to us.
• The firm that invited you. If a customer sends you a connection link, it gives us your email address, which accounts it wants connected, and usually your name.
• Financial institutions and data-access networks. The statements, documents, and account data retrieved from the institutions you connect, directly or through a data-access network: Akoya, Mastercard Open Banking (which operates as Finicity), Plaid, or MX.
• Stripe, which tells us whether a payment succeeded, the card brand and last four digits, and the billing details you entered.
• Identity-resolution partners. On the website only, RB2B and its partners, including LiveIntent, compare your IP address and cookies with an identity graph. If you are in the US, they may tell us your name, company, work email, and LinkedIn profile so our sales team can follow up.
• HubSpot, our customer-relationship system, adds company details such as industry, size, and location to contact records.
• Advertising platforms. Google, Meta, and Reddit report how their ads performed in aggregate. They do not give us individual profiles.

4. How we use it

• To provide the Services. Retrieve documents from the accounts you connect, keep a copy in your DocGenie account, deliver documents to the storage you designate, and show you connection status. For Customer Data, this, keeping the Services secure and supported, and complying with law are the only uses the Terms of Service license.
• To run your account. Create it, sign you in, bill you, send service messages such as retrieval failures and re-authorization requests, and answer support requests.
• To keep the Services secure. Detect and block fraud, account takeover, and bots; investigate incidents; keep logs.
• To understand and improve the Services. Analyze how the website and the app are used, measure what works, fix errors, and decide what to build.
• To market to you. Send product and marketing emails you can unsubscribe from, and show you messages inside the app.
• To advertise. Measure our advertising and show ads for DocGenie on Google, Meta, and Reddit to people who visited the website or the app.
• To follow up on sales interest. Identify the businesses visiting the website and contact people who look like a fit.
• To comply with law. Respond to lawful requests, enforce our terms, and keep the records tax and accounting law requires.

We do not sell personal information for money. California may treat the exchange with our identity-resolution partners as a sale, and the opt-out in section 6 covers it. We do not use Customer Data for advertising or to train machine-learning models, and no advertising, analytics, or identity-resolution partner receives the contents of a statement, a financial-account credential, or an access token.

5. Who we share it with

In short: Named service providers, analytics tools, advertising partners, and identity-resolution partners, each for the purpose in the table. The contents of retrieved documents go only to Amazon Web Services, the data-access networks, and the storage destination you choose. Credentials and access tokens go only to Amazon Web Services, the data-access networks, and the institution itself.

Service providers process information only on our instructions. Analytics tools, advertising partners, and identity-resolution partners also use what they collect for their own purposes, under their own privacy policies, linked from each company's name. The last column says what you can do about each one.

Tracking inside the app

Google Analytics, Google Ads, Meta, Reddit, and Microsoft Clarity run inside the app through Google Tag Manager, including on the pages you see after signing in. They receive the pages you view and account events: registration, sign-in, and purchase, with the plan and amount for a purchase. They do not receive your name, email address, or phone number, the contents of any document, a financial-account credential, or an access token, and Clarity's recordings mask all text. The Customer.io browser script also runs inside the app and receives your email address and account ID so it can show you in-app messages.

None of these run if you opt out on the Your Privacy Choices page or if your browser sends the Global Privacy Control signal. The app then does not load Google Tag Manager or the Customer.io browser script. Our servers still send your name, email address, and account events to Customer.io, as the table says.

Other situations

• At your direction. To the storage destination you connect, to the firm that connected your account, and to anyone else you ask us to send information to.
• Legal requirements. To comply with a law, subpoena, court order, or lawful government request, or to protect the rights, property, or safety of DocGenie, our customers, or others. Where the law permits, we notify the customer of any legal demand for its Customer Data before complying with it.
• Business transfers. If DocGenie is acquired, merges, or sells substantially all of its assets, personal information transfers to the successor, who takes it subject to this policy. We will tell registered customers by email.

We share personal information with no one else. We do not sell it for money, and we do not give or sell lists of customers, contacts, or connected account owners to anyone.

6. Tracking on the website and in the app

The Cookie Notice describes the cookies, pixels, and browser storage the tools in section 5 use, grouped by purpose. This section covers what you can do about them.

• Your Privacy Choices. The Your Privacy Choices page turns off the analytics, advertising, identity-resolution, and marketing tools on the website and in the app for the browser you are using. It stores your choice in a cookie named dg_optout for up to one year; Safari and other browsers on an iPhone or iPad can delete that cookie after seven days. PostHog keeps running on the website because it is first-party and only we use its data. The choice lives in that browser only, and it does not delete what the partners collected on earlier visits.
• Global Privacy Control. If your browser sends the Global Privacy Control signal, the website and the app treat it as the same opt-out. We do not respond to Do Not Track signals, which have no settled meaning.
• The app. The app reads the same cookie and the same signal. When either one is present, it does not load Google Tag Manager, so Google Analytics, Google Ads, Meta, Reddit, and Microsoft Clarity do not run. It also does not load the Customer.io browser script, so you see no in-app messages. Stripe, Google reCAPTCHA, FingerprintJS Pro, Datadog, the data-access networks, Frill, and Google Fonts keep running because they protect accounts and keep the app working. The opt-out does not stop our servers from sending names, email addresses, and account events to Customer.io, which forwards them to HubSpot and to our internal Slack.
• Vendor controls. Google, Meta, Reddit, Microsoft, and RB2B each offer their own opt-out, linked in the table in section 5 and on the Your Privacy Choices page.
• Browser settings. Your browser can block or delete cookies, including essential ones. Blocking essential cookies can stop sign-in from working.

7. How long we keep it

• Account details and settings. For as long as your DocGenie account exists. When it is deleted, we delete them, except billing records we must keep for the period tax and accounting law requires, and records we need to prevent fraud, enforce our terms, or resolve a dispute, which we keep only as long as that purpose lasts.
• Financial-account credentials and access tokens. Deleted promptly when the account is disconnected, or the DocGenie account it belongs to is closed, and in any event within thirty-five (35) days, including backup copies.
• Retrieved documents. Kept in the DocGenie account they were retrieved for, for as long as that account exists, and deleted when the account is deleted. Backup copies are deleted within thirty-five (35) days. Disconnecting a financial account does not delete the documents already retrieved from it; they stay in that DocGenie account until it is deleted. Copies delivered to storage you or your firm control are outside our systems, and we do not delete those.
• Messages and sales records. For as long as we have a relationship with you or your firm, and for a reasonable period after, unless you ask us to delete them sooner.
• Usage data and session recordings. Kept in each analytics tool until that tool's retention period ends or we delete them.
• Backups. Automated backups are kept for thirty-five (35) days.

When a legal hold or an active investigation requires it, we keep the affected information for as long as the hold lasts.

8. How we protect it

Retrieved documents, their metadata, credentials, and access tokens are encrypted at rest with AES-256-GCM, credentials under an encryption key unique to each firm, and everything is encrypted in transit with TLS. Access to connected accounts is read-only by design: the Services retrieve documents and cannot move money, initiate transactions, or change account settings. Every employee with production access has passed a background check. Our controls are aligned with SOC 2 Trust Services Criteria and with the Gramm-Leach-Bliley Act Safeguards Rule. We are not currently SOC 2 certified. The Security page describes the program in detail.

If we determine that a security incident has affected a customer's Customer Data, we notify that customer without undue delay and in any event within seventy-two (72) hours, as the Terms of Service require. No system is perfectly secure, so keep your password private, and email hello@docgenie.cloud if you think your account has been accessed without your permission.

9. Children

The Services are for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we close the account and delete the information. If you believe a person under 18 has given us personal information, email hello@docgenie.cloud.

10. Your choices and rights

In short: You can see, correct, delete, or export your information, stop marketing email, and opt out of tracking. We respond within forty-five (45) days and never charge for a request.

• Your account. You can update your name, email address, and password in your account settings. To close your account, email hello@docgenie.cloud.
• Marketing email. Every marketing email has an unsubscribe link. Service messages about your account, such as a failed retrieval or a re-authorization request, continue while your account exists.
• Tracking. Section 6 describes the opt-out, the Global Privacy Control signal, and the vendor controls.
• Access, correction, deletion, and a copy of your information. Email hello@docgenie.cloud with the subject "Privacy request," use the contact form, or write to the address in section 14. Tell us what you want and the email address your account or message used.
• Connected account owners. Requests about the documents retrieved from your account go to the firm that connected it, and we help the firm respond. You can ask us directly to disconnect the account, and we do so within five business days and tell the firm.

How we handle a request. We verify that a request comes from you by matching it to the email address on your account or by asking you to sign in; we may ask for more information when that is not enough, and we use that information only for verification. An authorized agent must show written permission from you. We respond within forty-five (45) days and, if a request is complex, may take up to forty-five (45) more days after telling you why. We will not deny you the Services, charge a different price, or provide a different level of service because you exercised a right. If we decline a request, we tell you why, and you may appeal by emailing us at hello@docgenie.cloud; we answer appeals in writing within forty-five (45) days. If you are not satisfied with the outcome of an appeal, you may contact the attorney general of your state.

11. US state privacy rights

California, Colorado, Connecticut, Utah, Virginia, and a growing number of other states have privacy laws that apply to businesses above certain revenue, data-volume, or business-size thresholds. We believe we are below those thresholds as of the date at the top of this policy. We give every US resident the rights in section 10 anyway, and we make the disclosures below so you can see what those laws would require us to show.

Categories of personal information

In the preceding twelve (12) months, we have collected these categories of personal information, using the categories California law uses:

Section 3 lists the sources, section 4 the purposes, and section 7 how long each kind is kept.

Disclosed, shared, and sold

In the preceding twelve (12) months, we disclosed categories A, B, D, F, G, H, I, K, and L to the service providers named in section 5 for a business purpose. We shared categories A, F, G, and K with Google, Meta, Reddit, Microsoft, HubSpot, and the identity-resolution partners for cross-context behavioral advertising and sales follow-up; you can opt out of that sharing on the Your Privacy Choices page or by sending a Global Privacy Control signal. We have not sold personal information for monetary consideration. We do not knowingly sell or share the personal information of anyone under 16, and we offer no financial incentive in exchange for personal information.

Sensitive personal information

We use financial-account credentials and access tokens only to retrieve documents at your or your firm's direction, which is a use California law permits without a right to limit. We do not use them to infer anything about you, and we disclose them only to the institution, the data-access network, and our hosting provider as needed to retrieve and store documents. If you believe we are using sensitive personal information for any other purpose, tell us, and we will treat your message as a request to limit that use.

California "Shine the Light"

California Civil Code section 1798.83 lets California residents ask once a year which categories of personal information, if any, we disclosed to third parties for their own direct-marketing purposes in the prior calendar year, and the names of those third parties. We do not disclose personal information to third parties for their own direct-marketing purposes. Send that request to the contact details in section 14.

12. Privacy notice for personal-purpose users

If you connect an account you hold for personal, family, or household purposes, for example, a sole owner connecting a personal card or an individual whose accountant or lawyer sent a connection link, federal law (the Gramm-Leach-Bliley Act) treats you as a consumer and asks us to tell you the following.

• What we collect. The login or access token for the account, the statements and documents retrieved from it, and your name and email address.
• Who we share it with. The firm that connected the account or sent you the link; the service providers that help us retrieve, store, and deliver documents and tell the firm when you connect, named in section 5; the storage destination the firm designates; and anyone the law requires. We do not sell it. The analytics and advertising tools in section 5 that run inside the app also learn that your browser visited the app's pages, including the connection pages, but not which account you connected, your credentials, or your documents.
• Opting out. Federal law lets you opt out of sharing with unaffiliated companies, other than sharing needed to provide the service you asked for, sharing with our service providers, and sharing the law requires. The only sharing outside those exceptions is the page-visit information described above. To stop it, opt out before you open the connection link: use the Your Privacy Choices page in the browser you will connect from, or use a browser that sends the Global Privacy Control signal. The app then does not load those tools, as section 6 describes. If you open the link without opting out, those tools load on that visit.
• How we protect it. As described in section 8.
• After you disconnect. We delete the login or access token on the schedule in section 7. Documents already retrieved stay in the firm's DocGenie account and in the storage it designated; they are the firm's records, and the firm decides how long to keep them.

13. Changes to this policy

We update this policy when our practices change. The date at the top shows the latest revision, and the revised policy applies from that date. If a change would let us use personal information we already hold in a materially different way, we will tell registered customers by email before it takes effect.

14. Contact us

Email hello@docgenie.cloud, use the contact form, or write to: