1. Introduction
Doxify ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights as a user of our service at doxify.in.
By using Doxify, you agree to the collection and use of information as described in this policy.
2. Information We Collect
We collect the following types of information:
- Account information: Your full name, email address, firm/company name, phone number, and location — provided when you create or update your profile.
- Bank statement PDFs: Files you upload for conversion are processed temporarily in-memory to extract transaction data. We do not permanently store the original PDF files on our servers.
- Conversion records: Metadata about your conversions (file name, transaction count, date) and the generated XML output are stored in your account for download history.
- Payment information: Payment is processed by Razorpay. We do not store your card number, CVV, or any sensitive payment details. We only receive a confirmation of payment status.
- Usage data: Basic usage information such as pages visited and features used, collected to improve our service.
- Trial eligibility data: A random first-party browser cookie and keyed hashes of browser and verified-phone identifiers help prevent repeated free-trial claims. We do not use the browser identifier for advertising or general browsing tracking.
3. How We Use Your Information
- To provide and operate the Doxify service
- To process your bank statement PDFs and return Tally-compatible XML files
- To manage your subscription and billing
- To communicate with you regarding your account, support requests, and service updates
- To improve our product and fix errors
- To comply with legal obligations
4. Third-Party Services
We use trusted third-party services to operate Doxify:
- Clerk (clerk.com): Handles user authentication and account management. Your login credentials are managed securely by Clerk.
- Razorpay: Processes subscription payments. Razorpay is PCI-DSS compliant and your payment data is never shared with us.
- Anthropic (Claude AI): The text extracted from your PDF is sent to Anthropic's Claude API to identify and structure transactions. Anthropic's data handling is governed by their own privacy policy. No personally identifiable information beyond transaction data is shared.
5. Data Retention
- Your account and profile data is retained as long as your account is active.
- Conversion records and generated XML files are retained for your download history.
- Trial-eligibility browser hashes and decision events are retained for up to 30 days. The random browser token stays in your browser and expires after 30 days. A separate keyed phone hash is kept only for the one-trial-per-phone eligibility check and is removed with the associated entitlement.
- Uploaded PDF files are processed in-memory and are not permanently stored.
- You may request deletion of your account and associated data by contacting us at support@doxify.in.
6. Security
We implement industry-standard security practices including HTTPS encryption, secure authentication, and access controls to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Object to processing of your data
To exercise any of these rights, contact us at support@doxify.in.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the service after changes constitutes acceptance of the updated policy.
9. Contact Us
For any questions or concerns about this Privacy Policy, please reach out: