1. Overview & Data Controller
This Privacy Policy explains how Zoef Tech, a registered MSME and Udyam enterprise in India (“Zoef Tech”, “we”, “us”, or “our”), collects, processes, and protects your information when you use DocuMora.
For the purposes of applicable data protection legislation—including India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and global privacy benchmarks—Zoef Tech is the Data Controller responsible for your personal information.
2. Architecture-Accurate Data Collection & Processing
DocuMora is engineered with privacy-by-design principles. Below is an exact description of how data flows through each operational tier:
| Operating Tier | Data Stored / Processed | Storage Location | Third-Party Access |
|---|---|---|---|
| Guest Mode (Unauthenticated) | Document text, folders, starter templates, editor history, draft buffers. | 100% Client-Side in your browser’s IndexedDB and localStorage sandbox. | None. Zero server persistence. Data never leaves your device. |
| Member Accounts (Authentication) | Email address, hashed password, display name, account timestamps, email verification tokens. | Appwrite Cloud / Self-Hosted authenticated backend with cryptographic salting and SSL/TLS. | Appwrite infrastructure. Never sold or shared with advertisers. |
| Cloud Library Sync (Members) | Document markdown content, folder structure, trash vault items, document titles, tags, and timestamps. | Encrypted Appwrite Databases and Appwrite Storage buckets partitioned strictly to your User ID. | Isolated to your user account. Accessible only with valid authentication tokens. |
| Document Export APIs (DOCX & PDF) | Document text and styling for the brief duration required to assemble file buffers. | Processed strictly in-memory during request execution. | Zero disk caching. Document content is streamed back to your browser and immediately wiped from server memory. |
| AI Paste & Prompt Tools | Clipboard text parsed for LaTeX, tables, chemical SMILES, and markdown cleaning. | Processed locally inside your browser runtime. | No telemetry or server logging of your clipboard contents. |
3. What Information We Do NOT Collect
We believe educators deserve a calm, distraction-free environment without surveillance:
- No Third-Party Ad Networks: We do not load Google AdSense, Meta Pixel, tracking pixels, or cross-site advertising SDKs.
- No AI Model Scraping: We do not scrape, harvest, or aggregate your worksheets or lesson plans to train public artificial intelligence models.
- No Sale of Personal Data: We never sell, rent, monetize, or trade teacher contact details or student worksheets.
4. Cookies & Local Storage Usage
DocuMora only uses essential, functional cookies and local browser storage necessary for application functionality:
- Authentication Cookies: Appwrite session cookies (such as
a_session_*) withSameSiteandSecureattributes to manage secure member sessions. - Local Preferences:
mathdoc_theme(dark/light theme mode), editor pane split ratios, and recent subject pack selections stored in browserlocalStorage.
5. How We Protect Your Data
We implement modern technical and organizational safeguards to protect your information:
- All web traffic is encrypted using modern TLS 1.3/HTTPS cryptographic protocols.
- Database communication between our application tier and Appwrite is authenticated and isolated by strict user-level access control lists (ACLs).
- Our recovery vault allows registered members to restore accidentally deleted documents within their own accounts.
6. Your Data Rights & Choices
Under applicable data protection laws (including the DPDP Act 2023, GDPR, and CCPA), you have the right to:
- Access & Export: Download all of your documents at any time in open Markdown (.md) or Microsoft Word (.docx) formats.
- Rectification: Update your profile name or change your password directly from your account settings.
- Erasure (“Right to be Forgotten”): Delete documents, empty your Trash Vault, or request complete account and cloud database deletion by contacting us at legal@documora.com.
- Withdraw Consent: Stop using cloud sync and switch back to local-only Guest mode at any time.
7. Children’s Privacy
DocuMora is an educational productivity tool intended for educators, teachers, curriculum authors, and adult learners. We do not knowingly collect personal information directly from children under 13 (or under 18 without parental/institutional consent). If you become aware that a child has provided us with personal information without consent, please contact us immediately.
8. Grievance Officer & Inquiries
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 of India, the contact details of our designated Grievance Officer and Data Protection representative are:
- Entity: Zoef Tech (msme and updyam regsitered company)
- Grievance Officer: Tauseef Khan
- Email: legal@documora.com
- Jurisdiction: Varanasi, Uttar Pradesh, India