Política de Privacidad

The Application collects information when you download and use it. This information may include information such as:

• Your device's Internet Protocol address (e.g., IP address)
• The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• Your mobile operating system you use
• Locally Stored User Assets (Signatures, Annotations, Scans): Any digital signatures created or saved by you, custom stamps, annotations, photos, and scanned documents are stored within your device's local application storage. The Service Provider does not collect, transmit, view, or store your saved signatures, drafts or documents on external servers, except the documents you choose to save to the cloud (see "Account and Cloud Storage" below).

Creating an account is optional: the Application works without one. An account is required for DocEnhance Pro on Windows and for cloud storage. If you create an account, the Service Provider processes the following data:

• Account data: your email address, your name and profile photo (if you sign in with Google), and a user identifier. Sign-in is managed by Firebase Authentication (Google).
• Cloud documents: only the documents you choose to save to the cloud, with their name, size, type, a SHA-256 checksum and their dates. The content is stored in Cloudflare R2 and the index in Cloudflare D1. The Service Provider does not read or analyze the content of your documents and uses it only to store and sync it for you; it is never used to train any model.
• Your devices: a random identifier created when the Application is installed (not a hardware identifier), the name that Windows or Android gives to the device, the platform, the app version and the last sync time. This lets your account show your devices and which device made each version of a document. No location and no IP address are stored with this data.
• Subscription status: your plan, its expiration date and your purchase history, managed by RevenueCat, so DocEnhance Pro works on all the devices where you sign in.
• Free trial fingerprint: when you start a free trial, a one-way fingerprint of your email address (HMAC-SHA256 with a key held by the server; it cannot be turned back into your email address), so that each email address gets one free trial, also if an account is deleted and created again.
• Technical logs: for each request, the server records the route (without identifiers), the result and the time it took. It never records sign-in tokens, your user identifier or the content of your documents. Cloudflare, which runs the servers, sees the IP address of each request.

Your data travels encrypted (HTTPS) and is stored encrypted at rest by the providers above. Cloud storage is not end-to-end encrypted.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. On Windows and on the web, Paddle collects your payment details, billing country (and postal code where required), issues your receipt and handles taxes, under its own privacy policy. The Service Provider does not receive your full card number.

Purchases in the Android app are processed by Google Play under its own privacy policy.

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at support@docenhance.com.

If you are in Mexico, these are your rights of access, rectification, cancellation and opposition (ARCO rights) under the Federal Law on the Protection of Personal Data Held by Private Parties.

If you have an account, you can also exercise them directly in the Application: "Download all" downloads all your cloud documents, and "Delete account" deletes your account, your cloud documents and your devices at any time.

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at support@docenhance.com.

The Application uses Artificial Intelligence (AI) technologies to enhance user experience and provide certain features. The AI components may process user data to deliver personalized content, recommendations, or automated functionalities. All AI processing is performed in accordance with this privacy policy and applicable laws. If you have questions about the AI features or data processing, please contact the Service Provider.

On-Device Processing: Unless explicitly stated otherwise for a specific optional cloud feature, image processing, document scanning, edge detection, and OCR text extraction are performed locally ("on-device") on your mobile phone. Your scanned documents, images, and extracted text are stored on your local device and are not transmitted to or stored on the Service Provider's servers.

No AI Model Training: The Service Provider does not use your personal documents, scanned files, photos, or OCR-extracted text to train, fine-tune, or otherwise develop artificial intelligence or machine learning models.

Accuracy Disclaimers: AI-based features such as document scanning, edge detection, image enhancement filters, and Optical Character Recognition (OCR) text extraction are designed to assist you, but may not always produce fully accurate or complete results. You should review any AI-generated or OCR-extracted content before relying on it. See the "Software Functionality, AI, and Tool Accuracy Disclaimer" section of the Terms & Conditions for additional disclaimers.

The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to your email address. The information the Service Provider requests will be retained and used as described in this privacy policy.

Apart from the account, cloud storage and purchase data described above, only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

• Google Play Services
• AdMob
• Google Analytics for Firebase
• Firebase Crashlytics
• Firebase Authentication
• RevenueCat
• Google ML Kit
• Cloudflare
• Paddle
• Microsoft Store

The Service Provider may disclose User Provided and Automatically Collected Information:

• As required by law, such as to comply with a subpoena, or similar legal process
• When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
• With their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

The providers of the account, cloud storage and payments (Google, Cloudflare, RevenueCat and Paddle) process data on servers outside Mexico, which may be outside your country. Using these services involves an international transfer of your data to them.

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at support@docenhance.com.

The Service Provider retains personal data based on its necessity for the stated purposes:

• Account, cloud documents and devices: Retained until you delete them or delete your account. Deleted documents stay in the trash for 30 days and are then permanently deleted. Deleting your account deletes all your cloud documents, your devices and your account data.
• Free trial fingerprint: Retained after the account is deleted, for as long as needed to prevent repeated free trials.
• Payment and billing records: Retained by Paddle or Google Play as required by tax law.
• Other User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law.
• Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance.
• Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you.
• Data required for legal compliance: Retained as long as required by applicable law.
• Local App Data & Signatures: Since saved signatures, scan drafts, and cached files are stored strictly on your device, their retention is controlled by your device's operating system. You may permanently delete this data at any time by clearing the Application's cache/data via your device settings or by uninstalling the Application. Note that software updates or database migrations may also reset or delete locally stored application caches.

You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at support@docenhance.com. Please note that some User Provided Data may be required for the Application to function properly.

The Application is not intended for children under 18 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 18 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (support@docenhance.com) so that they will be able to take the necessary actions.

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at support@docenhance.com.

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at support@docenhance.com.