Privacy Policy

DOCUCOGNITOAI, SRL ("Company", "we", "our"), headquartered in Bella Vista, Santo Domingo, Dominican Republic (RNC 133-45956-6), is committed to protecting your privacy. This Privacy Policy transparently explains how we collect, process, share, and protect your information when you visit DocuCognito.ai. We have designed our practices to comply with the highest international standards, including the General Data Protection Regulation (GDPR - Europe), the California Consumer Privacy Act (CCPA/CPRA), the LGPD (Brazil), and Dominican Republic Law No. 172-13 on Personal Data Protection.

1. Information We Collect

As a B2B and B2C SaaS platform, we collect different layers of information:

• Account Data (Direct): Upon registration, we obtain your name, email, and authentication tokens via Google Firebase Auth.
• User Content: Forms you create, responses gathered from your respondents, and generated documents/templates. We act as a "Data Processor" for this information, while you remain the "Data Controller."
• Usage Data (Technical): We automatically collect telemetry to ensure stability, including obfuscated IP addresses, browser type, OS, and platform interaction metrics.
• Payment Information: Handled in an isolated manner by our PCI-DSS level payment processors (e.g., Stripe). We never store raw credit card numbers on our servers.

2. Legal Basis and Use of Information

In compliance with Article 6 of the GDPR, we process your information based on: (i) Contract Performance (to provide the SaaS service), (ii) Legitimate Interest (fraud prevention and software improvement), and (iii) Consent (for marketing and analytics cookies).

We use your data exclusively to:

• Authenticate access and manage billing.
• Process your templates securely using Artificial Intelligence models to automate documents.
• Provide technical support via support@docucognito.ai.
• Comply with legal obligations and prevent platform abuse.

3. Data Subprocessors (Sharing Data)

We do not sell, rent, or trade your personal data to advertisers. To operate globally, we share strictly necessary data with world-class infrastructure:

• Google Cloud Platform & Firebase: Hosting, Firestore databases, and authentication.
• AI Providers (e.g., OpenAI / Google Vertex): Form data is sent encrypted to generate the document. We do not allow these providers to use our users' data to train their public models.

4. International Transfers

Since DOCUCOGNITOAI, SRL operates from the Dominican Republic using US-based cloud servers (Google Cloud), your data will cross borders. We rely on Standard Contractual Clauses (SCCs) and AES-256 encryption at rest to guarantee your data maintains protection comparable to the GDPR and Law 172-13, regardless of physical storage location.

5. Data Retention and Security

We retain your personal information as long as your account is active. If you delete your account via the UI or by requesting it to our team, we will irreversibly destroy or anonymize your data and templates within 30 days, except for transactional/accounting records which we must keep for 10 years according to Dominican tax laws.

6. Your Privacy Rights

Regardless of your country of origin, DocuCognito.ai grants you universal rights over your data:

• Access and Portability: Download a CSV/JSON file with your information.
• Rectification: Update your details from your profile.
• Erasure (Right to be Forgotten): Permanently delete your account.
• Objection: Opt-out of non-essential communications.

To exercise any rights protected by the GDPR, CCPA, or Law 172-13, please email support@docucognito.ai. We will respond within a maximum of 30 calendar days.