Privacy Policy

1. Introduction

RAGENDOC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered document editing service.

By using RAGENDOC, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you authenticate via Google or Microsoft OAuth, we collect your email address, name, and profile picture.
• Document Content: All documents you create, edit, or upload to RAGENDOC.
• Collaboration Data: Information about document sharing, collaborators, and permissions.
• AI Prompts: Questions and prompts you submit to AI features.

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, and interaction patterns.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Session Data: Authentication tokens, session duration, and login timestamps.
• Performance Data: Error logs, load times, and technical diagnostics.

2.3 Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Remembering user preferences (theme, settings)
• Security and fraud prevention
• Analytics and performance monitoring

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Delivery

• Providing document editing and storage capabilities
• Processing AI-assisted content generation requests
• Enabling real-time collaboration features
• Authenticating your identity and managing sessions
• Autosaving and version control

3.2 Service Improvement

• Analyzing usage patterns to improve features
• Debugging and fixing technical issues
• Developing new features based on user needs
• Optimizing performance and reliability

3.3 Communication

• Sending service updates and notifications
• Responding to support requests
• Notifying you of policy changes

3.4 Security and Compliance

• Detecting and preventing fraud or abuse
• Enforcing our Terms of Service
• Complying with legal obligations

4. Third-Party Services

We integrate with third-party services that may collect and process your data:

4.1 Authentication Providers

• Google OAuth: Email, name, profile picture
• Microsoft OAuth: Email, name, profile picture

These providers have their own privacy policies governing their data practices.

4.2 AI Service Providers

• Groq AI: Receives your AI prompts and document context to generate responses

We use Groq AI's API services. Your prompts are processed according to their privacy policy and terms of service.

4.3 Search Services

• ScrapingDog: Processes search queries for academic and web searches when you enable source enhancement features

4.4 Data Sent to Third Parties

When you use AI features:

• Your prompts and selected document context are sent to Groq AI
• Search queries may be sent to ScrapingDog if source enhancement is enabled
• We do NOT share your entire document library with third parties
• Only the specific content you request AI assistance with is transmitted

5. Data Storage and Security

5.1 Data Storage

• Documents are stored in our PostgreSQL database
• Database backups are performed regularly
• Session data is stored with 24-hour expiration
• Version history is maintained for document recovery

5.2 Security Measures

We implement industry-standard security practices:

• HTTPS encryption for data in transit
• Secure session management with HTTP-only cookies
• CSRF protection for state-changing operations
• OAuth 2.0 for secure authentication
• Access controls and permission systems
• Regular security audits and updates

5.3 Data Retention

• Active Accounts: Data retained while account is active
• Deleted Documents: Permanently removed from active storage
• Backups: May retain data in backups for up to 90 days
• Logs: System logs retained for 30 days

6. Data Sharing and Disclosure

6.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information or document content to third parties for marketing purposes.

6.2 When We Share Data

We may share your information only in these limited circumstances:

• With Your Consent: When you explicitly authorize sharing
• Document Collaboration: With users you've invited to collaborate on specific documents
• Service Providers: With third-party services necessary for operation (hosting, AI, authentication)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Safety and Security: To protect rights, property, or safety of RAGENDOC, users, or the public

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access your personal information and documents
• Update or correct your account information
• Delete your documents at any time
• Export your documents
• Control document sharing and collaborator permissions

7.2 Cookie Management

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

7.3 Account Deletion

You may request account deletion by contacting us. Upon deletion:

• Your account and documents will be permanently deleted
• Shared documents will remain accessible to other collaborators
• Some data may persist in backups for up to 90 days

7.4 Data Portability

You can export your documents in standard formats at any time.

8. Children's Privacy

RAGENDOC is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using RAGENDOC, you consent to such transfers.

10. AI-Specific Privacy Considerations

10.1 AI Training

We do NOT use your documents or prompts to train our own AI models. However, third-party AI providers (like Groq AI) may have their own data usage policies.

10.2 AI Content

• AI-generated content becomes part of your document
• You retain ownership of AI-assisted content you create
• Similar prompts may generate similar AI responses for different users

10.3 Source Enhancement

When you enable source enhancement features:

• Keywords are extracted from your prompts
• Search queries are sent to ScrapingDog
• Results are integrated into AI context
• You can disable this feature in settings

11. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Updating the "Last Updated" date
• Posting a notice in the application
• Sending an email notification (for significant changes)

Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or concerns, please contact us at:

Email: privacy@ragendoc.com

Data Protection Inquiries: dpo@ragendoc.com

13. Your California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell personal information.

14. European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at the email addresses above.