Draft for legal review. Not yet reviewed by a lawyer; do not rely on it as final terms.
Privacy notice
Last updated 7 November 2026
This notice explains what happens to the files you convert with DocuKit, and the little other data we handle. In short: we process your file, give you the result, and delete both. We try to describe this precisely rather than reassuringly, so where something is a limit rather than a guarantee, it says so.
Your files
- Files are sent over an encrypted connection and stored under random identifiers, never under your file name.
- They are processed by software. No person looks at them as part of the service, they are not used to train AI models, and they are not sold or shared.
- Both the original and the converted file are deleted within 30 minutes of processing finishing, by a background process that runs whether or not your browser is still open. An upload that never finishes is deleted sooner, after about 15 minutes.
- You can delete them yourself at any time with the Delete button, which removes them immediately rather than waiting.
- Deletion removes the stored files and clears the saved copy of your file name. We cannot promise that every byte is unrecoverable from the underlying storage hardware, because no one operating on rented infrastructure can honestly promise that.
What we record about a conversion
We keep technical facts about each job so the service works and can be debugged: which tool was used, file sizes, page counts, how long it took, whether it succeeded, and a one-way fingerprint of the uploaded file. We do not record the contents of your document, and your file name is erased when the files are.
These records contain no document content, but they are still a record that a conversion happened, so they are not kept indefinitely. They are deleted automatically after 90 days.
Cookies
We set one cookie, containing a random identifier, so that only you can see the status of your own jobs. It is not linked to your name, email or any other data, and we store only a scrambled version of it alongside your jobs. There are no advertising or cross-site tracking cookies.
Logs
Our servers keep short-lived technical logs of requests: the time, the route, the response status, and a shortened form of your network address with the final part removed, so it identifies a network rather than you. Logs never contain your document’s contents, your file name, or download links.
Who else is involved
Running DocuKit means renting computers from other companies. When the service is live, your file passes through infrastructure operated by:
- Cloudflare — temporary file storage (R2), and DNS.
- Railway — the servers that run the conversion, and the database that holds the job records described above.
- Vercel — serving this website.
These providers host the service on our behalf. They are not given your files for any purpose of their own, and we do not send your documents to any other third party, analytics service or advertiser.
Where your data is processed
We choose regions close to our users where the provider offers them, but these are global providers and your file may be processed outside your country.
Security
Files travel over an encrypted connection and are stored under unguessable identifiers. Downloads need a signed link that expires. Conversions run in an isolated, locked-down container. We do not claim DocuKit is completely secure or completely private: no online service can, and converting a document means trusting a server with it. If a document is highly sensitive, converting it on your own computer is the safer choice, and we would rather say so.
Your rights
Because we hold no account for you and keep your files only briefly, there is usually nothing left to access or erase shortly after you finish. For any privacy question, including under India’s Digital Personal Data Protection Act, 2023, contact hello@docukit.example.
Status of this notice
This is a draft written by the people building DocuKit. It has not yet been reviewed by a lawyer, and it will be before the service is opened to the public. It describes the service as currently built; if the infrastructure above changes, this page changes with it.