Privacy Policy

Last updated: March 31, 2026

DocFill is operated by Dehex AI Solutions ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use the DocFill Chrome extension and related services.

1. What We Collect

Account Information: When you register, we collect your email address and an encrypted password hash. This is used for authentication and credit management.

Usage Metadata: We log the time of each form-fill request, the page URL, file type (e.g., "pdf" or "image"), token counts, and response time. This is used for billing, service monitoring, and abuse prevention.

Payment Information: If you purchase credits, payment is processed by Stripe. We do not store your credit card details. See Stripe's Privacy Policy.

2. What We Do NOT Collect or Store

• Your document content. Files you upload (PDFs, images, Word, Excel) are processed locally in your browser. Only extracted text or base64-encoded content is transmitted to our server for AI processing.
• Form fill values. The mapping results (e.g., "First Name: John") are returned to your browser and immediately discarded on our server. They are never written to any database.
• Original files. Your original files never leave your device.

3. How We Process Your Data

When you use DocFill to fill a form, the following happens:

• Your browser extension extracts text from your uploaded documents locally.
• The extracted text and the form field structure are sent to our server over HTTPS.
• Our server forwards this to the Anthropic Claude API to generate field mappings.
• The mapping result is returned to your browser extension.
• The extracted text is processed in server memory only and is not persisted to any database or file system.

4. Third-Party Processors

Anthropic (Claude API): We use Anthropic's Claude API for AI processing. Per Anthropic's API terms, data sent through the API is not used to train their models. See Anthropic's Privacy Policy.

Stripe: Payment processing. See Stripe's Privacy Policy.

Amazon Web Services (AWS): Our server infrastructure is hosted on AWS. See AWS Privacy Policy.

5. Data Storage Location

Our servers are hosted on AWS. The Anthropic Claude API servers are located in the United States. By using DocFill, you consent to your extracted text being processed in these regions. In compliance with PIPEDA, we ensure that equivalent data protection standards are maintained regardless of processing location.

6. Data Retention

• Account data: Retained while your account is active. You may request deletion at any time.
• Usage logs: Retained for 90 days for billing and monitoring purposes, then automatically deleted.
• Document content: Not retained. Processed in memory and discarded immediately.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing

To exercise these rights, contact us at support@dehex.ai.

8. Security

All data in transit is encrypted using TLS/HTTPS. Passwords are hashed using bcrypt. Our architecture is designed so that even in the event of a server breach, no document content or form fill values would be exposed, because we simply do not store them.

9. Cookies

The DocFill extension uses Chrome's local storage for session management (JWT tokens). Our website may use essential cookies for authentication. We do not use tracking or advertising cookies.

10. Children's Privacy

DocFill is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of DocFill after changes constitutes acceptance of the updated policy.

12. Contact

For privacy inquiries or data requests:

Dehex AI Solutions
Email: support@dehex.ai