Privacy Policy

Last updated: 24 July 2026

Docfarm (“we”, “us”) is a document-sharing service available at doc.farm. This policy explains what personal data we collect, why, and what your rights are. It applies both to people with a Docfarm account and to people who open a document shared through a Docfarm link.

Data we collect from account holders

When you sign in with Google we receive your name, email address, and profile picture. We store the documents you upload, the share links and settings you create, and the collaborators you invite. If you connect Docfarm to an AI assistant through our connector, we store the authorization tokens for that connection and technical logs of the requests it makes (tool name, timing, success or failure) so we can keep the service fast and secure.

Data we collect from document viewers

Viewer analytics are core to Docfarm: when you open a shared document, the person who shared it can see that the document was viewed, which pages were read, and for how long. Depending on the sender’s settings, you may be asked for your name or email before viewing, which is then shared with the sender. We also process technical data (IP address, browser and device type) for security, rate limiting, and abuse prevention. Senders can enable a transparency notice so viewers are informed that viewing is tracked.

How we use your data

We use your data to operate Docfarm: hosting and serving your documents, showing you viewer analytics, sending you notifications you asked for, and securing accounts. Documents may be processed by an AI model to generate summaries and suggestions for the document owner. We do not sell, rent, or trade personal data, and we do not use your documents to train AI models.

Where your data lives

Documents, analytics, and account data are stored in the European Union on Supabase (AWS, Ireland). The application is served by Vercel’s edge network. We use a small number of processors to run the service: Supabase (database, storage, authentication), Vercel (hosting), Google (sign-in), Anthropic (AI processing), and Upstash (rate limiting). All data is encrypted in transit (TLS) and at rest (AES-256).

Retention and deletion

We keep your data for as long as you have an account. You can delete individual documents, purge all analytics, or delete your entire account at any time from the app’s privacy settings. Deletion is permanent and propagates to backups within 30 days. If you are a viewer and want data about you removed, contact us or the person who shared the document with you.

Your rights

Under the GDPR (and similar laws such as the CCPA) you have the right to access, correct, export, delete, and object to the processing of your personal data. Account holders can exercise most of these rights directly in the app, including a full machine-readable export. For anything else, email us and we will respond within 30 days.

Cookies

We use cookies that are necessary to run the service: keeping you signed in, and remembering that a viewer passed a password or email gate. We do not use advertising or cross-site tracking cookies.

Contact

Questions about privacy: hello@doc.farm. Security reports: security@doc.farm. We will update this policy as the product evolves and note the date of the latest change at the top of this page.