Legal

Privacy Policy

Last updated September 08, 2026

This privacy notice for Docyrus, Inc. (doing business as Docyrus) ("Docyrus," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

Visit our website at https://docyrus.com, or any website of ours that links to this privacy notice
Download and use our mobile application (Docyrus), or any other application of ours that links to this privacy notice
Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at docyrus@docyrus.com.

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Docyrus and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we receive any information from third parties? We do not receive any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us.

WHAT INFORMATION DO WE COLLECT?
HOW DO WE PROCESS YOUR INFORMATION?
WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
HOW DO WE USE ARTIFICIAL INTELLIGENCE?
DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
HOW DO WE HANDLE YOUR SOCIAL LOGINS?
HOW LONG DO WE KEEP YOUR INFORMATION?
HOW DO WE KEEP YOUR INFORMATION SAFE?
DO WE COLLECT INFORMATION FROM MINORS?
WHAT ARE YOUR PRIVACY RIGHTS?
CONTROLS FOR DO-NOT-TRACK FEATURES
DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
DO WE MAKE UPDATES TO THIS NOTICE?
HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include: names, phone numbers, email addresses, passwords, job titles, contact preferences, contact or authentication data, billing addresses, and debit/credit card numbers.

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you make purchases. All payment data is stored by Stripe. Their privacy notice is available here: https://stripe.com/privacy.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Facebook, Twitter, or other social media account.

Application Data. If you use our application(s), we also may collect:

Geolocation Information
Mobile Device Access
Mobile Device Data
Push Notifications

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

Log and Usage Data
Device Data
Location Data

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, including:

To facilitate account creation and authentication and otherwise manage user accounts
To deliver and facilitate delivery of services to the user
To respond to user inquiries/offer support to users
To send administrative information to you
To fulfill and manage your orders
To enable user-to-user communications
To request feedback
To send you marketing and promotional communications
To deliver targeted advertising to you
To protect our Services
To identify usage trends
To determine the effectiveness of marketing and promotional campaigns
To save or protect an individual's vital interest

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

If you are located in the EU or UK, this section applies to you. Legal bases include:

Consent
Performance of a Contract
Legitimate Interests
Legal Obligations
Vital Interests

If you are located in Canada, this section applies to you, including express/implied consent and specific legal exceptions.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with categories of third parties.

Vendors, consultants, and other third-party service providers may process your data on our behalf under contracts designed to safeguard your personal information.

Categories may include:

Ad Networks
Affiliate Marketing Programs
Artificial Intelligence Service Providers
Cloud Computing Services
Communication & Collaboration Tools
Data Analytics Services
Data Storage Service Providers
Finance & Accounting Tools
Government Entities
Order Fulfillment Service Providers
Payment Processors
Performance Monitoring Tools
Product Engineering & Design Tools
Retargeting Platforms
Sales & Marketing Tools
Social Networks
Testing Tools
User Account Registration & Authentication Services
Website Hosting Service Providers

We also may share data for business transfers, Google Maps Platform API use, affiliates, and business partners.

5. HOW DO WE USE ARTIFICIAL INTELLIGENCE?

In Short: Our Services include an optional artificial intelligence assistant called Docy. When you use it, your messages and the workspace data needed to answer them are sent from our servers to third-party AI model providers, which process that data only to generate a response and do not use it to train their models. If you do not use the assistant, none of your data is sent to any AI provider.

The Docy assistant

Docyrus includes an artificial intelligence assistant called Docy, available inside our web and mobile applications. Docy lets you ask questions in natural language about the records, documents, and other content in your workspace, and it can perform actions in the Services on your behalf when you ask it to.

What we send to AI model providers

We do not train or host our own AI models. To produce an answer, Docyrus sends the following from our servers to third-party AI model providers over their commercial APIs:

The messages, questions, files, and instructions you send to the assistant
The workspace data required to answer your request, such as records, fields, documents, or query results the assistant needs to read, limited to the data your own access permissions already allow you to see
Technical context needed to run the request, such as the description of the tools available to the assistant and the conversation history of the current session

The assistant does not receive workspace data that you are not authorized to access, and we do not send your payment card details or your account password to any AI model provider.

AI model providers we use

Depending on the model selected for your workspace or for a specific feature, your request may be processed by one or more of the following providers, acting as our sub-processors:

OpenAI
Anthropic
Google (Gemini models)
Microsoft Azure (OpenAI models hosted on Microsoft Azure)

These providers may be located in, or operate infrastructure in, countries outside your country of residence, including the United States and the European Union. Transfers are carried out under the safeguards described in this notice and in our data processing addendum.

How providers may use this data

We use these providers under their enterprise and commercial API terms. Under those terms, the providers process your data solely to generate the response returned to you, and they do not use your prompts, your workspace data, or the responses generated for you to train or improve their models. We also do not use the content of your assistant conversations to train models.

How long AI providers keep this data

Data sent to an AI model provider is processed only for as long as it takes to generate the response. Providers may retain the request for a limited period for abuse monitoring, security, and legal compliance purposes only, and delete it after that period. In no case may a provider retain the data longer than its API terms and our data processing agreement with that provider allow.

The rules that govern this processing, including permitted retention periods, confidentiality, security measures, sub-processors, and international transfers, are set out in the Docyrus Platform Services Framework Agreement and its Data Processing Addendum (DPA), which form part of your agreement with us. See also our Terms of Service.

Web Search in the assistant

The assistant has an optional Web Search feature. When you enable Web Search for a request, the search query derived from your message is sent to an external web search service so that current information from the public internet can be included in the answer. Only the search query is sent to that service. Your workspace records and documents are not sent to the search service. When Web Search is off, no query leaves Docyrus for a search service.

Using the assistant is optional

The AI assistant is an optional feature of the Services. If you do not open or use the assistant, no part of your messages or workspace data is sent to any AI model provider or web search service. Workspace administrators can also disable the assistant and its Web Search feature for their workspace. The assistant does not make automated decisions about you that have legal effect, and the answers it produces may be inaccurate or incomplete, so you should review them before relying on them.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Where you choose to do this, we will receive profile information from your social media provider and use it only for purposes described in this privacy notice or otherwise made clear to you.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or securely store it until deletion is possible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through organizational and technical security measures.

No electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

If you become aware of any data we may have collected from children under age 18, please contact us at docyrus@docyrus.com.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as the EEA, UK, and Canada, you have rights that allow you greater access to and control over your personal information.

These rights may include the right to access, correct, erase, restrict, or port personal information and object to processing.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you may complain to the Member State data protection authority or the UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

You can opt out of marketing communications via unsubscribe links, replying STOP/ UNSUBSCRIBE to SMS, or contacting us.

Cookies and similar technologies: Most web browsers are set to accept cookies by default. You may usually choose to remove or reject cookies. You may also opt out of interest-based advertising.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting.

At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized, and we do not currently respond to DNT browser signals.

13. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83 ("Shine The Light" law) permits California residents to request and obtain certain information about disclosures for direct marketing purposes.

CCPA Privacy Notice

Categories collected in the preceding twelve (12) months include Category K (Inferences drawn from other personal information) as YES, and listed categories A-L otherwise as shown in the policy.

Docyrus, Inc. has not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

Your rights may include:

Right to request deletion of the data
Right to be informed (request to know)
Right to non-discrimination for exercising privacy rights
Right to limit use/disclosure of sensitive personal information

For CCPA requests, we may perform identity verification and may require additional information as reasonably necessary.

14. DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of Virginia, you may be granted specific rights regarding access to and use of your personal information.

Under the Virginia Consumer Data Protection Act (CDPA), applicable rights include:

Right to be informed whether we process personal data
Right to access personal data
Right to correct inaccuracies
Right to request deletion
Right to obtain a copy of shared personal data
Right to opt out of targeted advertising, sale, or profiling

Docyrus, Inc. has not sold any personal data to third parties for business or commercial purposes and will not sell personal data in the future belonging to website visitors, users, and other consumers.

If an appeal is denied, you may contact the Attorney General to submit a complaint.

15. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at docyrus@docyrus.com or by post to:

Docyrus, Inc.

Philadelphia Pike, Claymont, DE, USA

Claymont, DE 19703

United States

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.