What data we collect

DocManager collects only the data necessary to operate the service:

• Account information — your name, email address, and password (stored as a one-way hash).
• Documents you upload — files, titles, tags, and metadata you provide.
• Activity logs — actions taken within your account (uploads, downloads, logins) for audit purposes.

We do not sell, share, or use your data for advertising.

How your data is stored

• All data is stored on servers controlled by your DocManager provider.
• Documents are stored on encrypted volumes. Passwords are hashed using bcrypt and never stored in plain text.
• Audit logs are retained for 12 months then automatically deleted.

Your rights

• Access — you can view all your documents and account data at any time.
• Correction — you can update your name and email from the Settings page.
• Deletion — account administrators can permanently delete all organisation data from Settings → Danger Zone. This is immediate and irreversible.
• Export — administrators can download a complete backup of all data at any time from Admin → Backup.

Cookies and tracking

DocManager does not use tracking cookies or third-party analytics. A session token is stored in your browser's local storage to keep you logged in. It is cleared when you log out.

Data breaches

In the event of a data breach affecting your information, your DocManager provider will notify affected users as soon as practicable and in accordance with applicable law.

Contact

For privacy enquiries, contact the administrator of your DocManager account.