Privacy Policy

1. Who this policy covers

This policy describes how Docside handles information about real estate agents who hold accounts, sellers who view reports through share links, and individuals whose information appears in documents submitted to the service — including documents sent in by third parties, such as buyer’s agents, through a property’s intake email address.

2. Information we collect

Account information. Name, email address, password credentials, and profile details agents provide, such as brokerage and license information.

Documents. The real estate documents you upload or receive by intake email. These routinely contain personal and financial information about parties to a transaction — names, addresses, loan amounts, deposit figures, and similar terms.

Share-link activity. When a seller opens a share link, Docside records that the report was opened. Share links are anonymous: viewing a report does not require an account, and Docside does not identify who opened a link.

Audit and technical logs. Docside keeps an audit log of actions taken in the service (including anonymous records of share views) and standard technical logs needed to operate and secure it.

3. How we use information

We use information to provide the service — extracting and presenting document terms, generating summaries, and delivering share links — and to respond to support requests, secure the service, and meet legal obligations. Docside does not sell personal information and does not use your information for advertising.

4. AI processing and vendors

Docside uses automated document processing and language models to extract and summarize document terms. Because real estate documents contain regulated personal and financial data, every AI vendor must contractually meet all seven of Docside’s data-processing requirements: zero data retention beyond the immediate inference call, no training on submitted data, no payload logging, US-based data residency, a signed Data Processing Addendum, a documented subprocessor list, and a breach-notification SLA.

Extraction runs on Google’s Gemini Enterprise Agent Platform under an approved zero-data-retention configuration, and document text recognition uses Google Document AI, processed synchronously in memory. Docside’s service providers include Supabase, Vercel, Google Cloud, Postmark, Resend, and Inngest.

5. Security

Share and intake link tokens are never stored in plaintext — only a cryptographic hash is kept. Each agent’s data is isolated with database row-level security, and mutations are recorded in an audit log. No system is perfectly secure, but the service is designed so that a stored token is not usable if disclosed.

6. Retention

Share links expire automatically sixty days after they are created and can be disabled earlier by request to support. Documents are retained only as long as needed to provide the service; Docside is building an automatic deletion cycle. Contact support@Docside.ai with questions or requests about your information.

7. Share links and sellers

Sellers never create accounts. A share link is an anonymous, expiring URL prepared by the agent; opening it shows the frozen report the agent shared. Docside records that a report was opened but does not track the identity of the viewer.

8. Children

Docside is a professional tool for real estate agents and is not directed to children under 16. We do not knowingly collect information from children.

9. Changes and contact

If this policy changes materially, we will notify account holders by email before the changes take effect. Questions about this policy or about your information: support@Docside.ai.