Privacy Policy
Last updated: June 2026
1. Who we are
Doxi (“we”, “our”, “us”) provides a personal document filing cabinet accessible at doxi.app and through our mobile applications. This policy explains how we collect, use, and protect your information.
2. What we collect
Account information — your name and email address when you register.
Documents you upload — files you store in your Doxi filing cabinet. These are encrypted at rest and in transit.
Usage data — basic analytics (page views, feature usage) to improve the product. We do not sell this data.
Device information — browser type, OS version, and session timestamps for security purposes.
3. How we use your data
• To provide and operate the Doxi service.
• To send reminders and alerts you configure.
• To improve product features using aggregated, anonymised analytics.
• To comply with legal obligations.
We never sell your personal data or documents to third parties.
4. Data storage and security
Your documents are stored in the EU (Ireland) using Supabase Storage with AES-256 encryption at rest and TLS 1.2+ in transit. Access is controlled by row-level security — only you can read your files.
5. Data retention
We retain your data for as long as your account is active. If you delete your account, your documents and personal data are permanently deleted within 30 days, except where we are required by law to retain certain records.
6. Your rights (UK GDPR / GDPR)
You have the right to access, correct, export, or delete your personal data at any time.
To exercise these rights, use the Privacy & Data section in Settings, or contact us at privacy@doxi.app.
7. Cookies
We use session cookies required for authentication. We do not use third-party advertising or tracking cookies.
8. Changes to this policy
We will notify you of material changes by email and by updating this page. Continued use of Doxi after changes take effect constitutes acceptance.
9. Contact
Questions? Email us at privacy@doxi.app.