Privacy Policy

Docuflash is operated by Novodip ("Novodip", "we", "us", or "our"). This policy explains how we handle information when you use the Docuflash website and mobile app.

For privacy questions, contact us at novorony52@gmail.com.

• Account and profile information: your email address, display name, profile image, account identifier, authentication provider, and account preferences.
• Documents and sharing information: files you upload; file names, types, sizes, share links, expiry choices, access settings, file requests, folders, and notes.
• Authentication information: information needed to authenticate you, including email/password authentication and identity information provided through Google or GitHub sign-in when you choose those options.
• Technical information: app or browser state, an anonymous client identifier, and device information supplied with uploads to operate and protect the service.
• Deletion requests: the email address used to request account deletion and the verified session used to complete it.

We use this information to create and secure accounts, upload and share documents, provide file requests and previews, apply passwords and expiry settings, respond to support or deletion requests, prevent misuse, and maintain the service.

A public link may be opened by anyone who receives it. A password-protected link requires the password chosen by its sender. Do not share links or passwords with people you do not intend to access a document.

We use service providers to operate Docuflash. These include Supabase for authentication and realtime service features, UploadThing for file-upload and storage services, and hosting providers for the website and API. They process information only to provide their services to us.

We may disclose information when required by law or when reasonably necessary to protect users, Novodip, or the service from fraud, abuse, or security threats.

Files and links are available only under the access and expiration settings selected for them. When you request account deletion, we delete the account and its associated profile information, documents, file metadata, share links, folders, file requests, notes, avatar, and authentication identity within 14 days. The deletion cannot be undone.

We do not retain account or document data after that deletion is completed. Anonymous uploads that were not associated with an account are governed by their own expiry setting and cannot be located by an account-deletion request.

You can begin a signed-out, email-verified deletion request at Delete your Docuflash account. You can also delete an authenticated account from Profile in the mobile app or contact novorony52@gmail.com.

We use reasonable technical and organizational safeguards designed to protect Docuflash information. No internet service can guarantee absolute security, so use strong unique credentials and share documents only with intended recipients.

You may update account details in the app, delete individual content where the feature is available, or request account deletion. To ask about access to, correction of, or deletion of your information, email novorony52@gmail.com.

We may update this policy when Docuflash or applicable requirements change. We will post the updated version here and revise the effective date.