Docura Privacy Policy

Last updated 18 May 2026

1. CORE PRIVACY PRINCIPLE
Docura is a local-first application.Your documents, indexes, stored facts, and queries are processed and stored entirely on your local device.
We do not upload, store, or analyse your documents or AI queries.
We do not train AI models on your data.
Docura is designed so that document analysis, indexing, AI processing, and stored workspace data occur locally on your device.

2. INFORMATION WE COLLECT
2.1 Information You Provide Directly

We may collect limited personal information when you:
• subscribe to a paid plan,
• manage your subscription,
• request support,
• verify access via email.
This may include:
• email address,
• billing-related identifiers (e.g. Stripe customer ID),
• subscription status and plan type.
We do not collect document contents, prompts, AI outputs, or stored facts.

2.2 Automatically Collected Information (Website Only)
When you visit our website, standard web data may be collected, such as:
• IP address,
• browser type,
• device type,
• pages visited.
This information is used for basic site operation and analytics and is not linked to your local Docura data.

3. BILLING AND PAYMENTS
Payments and subscriptions are handled by Stripe,
our third-party payment processor.
We do not store your credit card or payment details.
Stripe processes payments in accordance with its own Privacy Policy.
Stripe may collect:
• billing name,
• payment method details,
• transaction history.
Docura will direct users to Stripe’s secure customer portal to manage a subscription.

4. EMAIL COMMUNICATIONS
We send emails only for essential purposes, such as:
• subscription management,
• payment notifications,
• one-time access or verification codes,
• support responses.
Transactional emails are delivered via trusted third-party providers.
We do not send marketing emails without your consent.

5. AI MODELS AND DATA PROCESSING

Docura uses local AI models managed via Ollama.
Models run on your own device.
Docura does not receive or store AI prompts or responses.
Model behaviour and licensing are governed by Ollama and model authors.
You are responsible for ensuring compliance with any applicable model licences.

6. CLOUD STORAGE INTEGRATIONS
Docura may optionally connect to third-party cloud storage providers, including:
Microsoft OneDrive and Outlook (via Microsoft Graph) and Google Drive.
These integrations are user-initiated and optional.
When enabled, Docura may access files and folders that you explicitly choose to import or monitor within the application.
Docura uses read-only permissions and never modifies or delete files stored in your cloud accounts.
Files selected for import are copied to your local device and are processed locally on your device.
Docura does not upload your document contents to GroundState Labs servers for AI analysis, indexing, or model training.
To support synchronisation and monitoring features, limited metadata may be temporarily processed, including:
• file names,
• folder names,
• file identifiers,
• modification timestamps,
• account identifiers associated with the connected provider.
Authentication tokens provided by Microsoft or Google may be stored locally on your device to maintain your connection and enable continued access to authorised folders.
You may revoke Docura’s access to your cloud storage accounts at any time through:
your Microsoft or Google account security settings or within Docura.
Docura’s use and transfer of information received from Google APIs fully adhere to the
Google API Terms of ServiceandLimited Use requirements.Docura’s use of Microsoft APIs and Microsoft Graph is governed by the Microsoft APIs Terms of Use and
Microsoft Graph Terms of Use.
7. LOCAL FILE COPIES AND INDEX RETENTION
When files are imported from connected cloud storage providers (such as Microsoft OneDrive, SharePoint, or Google Drive), Docura creates a local copy of the selected files on your device so they can be indexed and processed locally by AI models.
These local copies remain on your device until deleted by you.
Deleting a local file does not automatically remove information previously extracted into Docura’s search index, embeddings, memory structures, or related local processing data.
Indexed information may remain available within Docura until:
the workspace or index is rebuilt or reindexed,the relevant indexed data is manually removed, or the workspace is deleted.
This behaviour also applies to files added directly from local folders on your device.
All indexing and retention occurs locally on your device. GroundState Labs does not receive or store your indexed document contents.

8. DATA STORAGE AND SECURITY
Because Docura operates locally:
• your documents and indexes are stored on your own computer,
• security depends on your local environment.
You are responsible for:
• device security,
• backups,
• access control.
Docura cannot protect against:
• malware,
• device theft,
• shared user accounts,
• hardware failure.

9. DATA RETENTION
We retain personal information only as long as necessary to:
• operate subscriptions,
• comply with legal and accounting requirements,
• provide support.
You may cancel your subscription at any time. Billing records may be retained where legally required.

10. SHARING OF INFORMATION
We do not sell, rent, or trade your personal information, including your email address.
We may share limited data only with:
• payment processors (Stripe),
• email delivery providers (for transactional emails),
• service providers required to operate Docura.
All third parties are required to protect your data appropriately.

11. YOUR RIGHTS
Depending on your location, you may have the right to:
• access personal information we hold about you,
• request correction or deletion,
• object to certain processing.
To exercise these rights, contact us at support@docuraai.com
12. CHILDREN'S PRIVACY
Docura is not intended for use by children under 18.
We do not knowingly collect personal information from children.

13. INTERNATIONAL USERS
Docura is operated from Australia.
If you access Docura from outside Australia, your information may be processed in jurisdictions with different data protection laws.

14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time.
Updates will be posted on our website with a revised “Last updated” date.
Continued use of Docura constitutes acceptance of the updated policy.

15. CONTACT
Docura is operated by GroundState Labs Pty Ltd (ACN 696 890 310), Australia.
If you have questions or concerns about privacy, contact us at support@docuraai.com