What happens to your writing.

Who holds this

Docmode is run by Innovadea, registered in the Netherlands under KVK 42150287, VAT NL005536629B88.

Where your data lives

The database is hosted in Frankfurt, inside the European Union. Your documents, folders, comments and settings are stored there. Some of the services further down are elsewhere, and each is named so you can see what leaves and why.

What we collect

When you create an account we store your email address, your name if you give one, and a password hash or a link to your Google account, depending on how you sign up. As you use Docmode we store the documents, folders, comments and settings you create. That is the point of the product.

Alongside that, a few things the product needs to work:

• A list of your signed in sessions, each with the browser it came from, so you can see them and end any of them.
• A record of every AI action, with the plan and the model that answered and how many tokens it used. That is how the monthly allowance is counted and how what we spend is worked out.
• Versions of your documents, saved as you write. The free plan shows the last 30 days and a paid plan shows all of them. Nothing is deleted for being outside that window.
• If you write to us through the contact page: your address, your name if you gave one, your message, and a salted hash of the network address it came from. The address itself is never stored, and the hash exists only to stop the form being used to send in bulk.

What we do not do

We do not sell your data. We do not show ads. We do not train AI models on your documents. We do not read your documents except when required to investigate abuse or when you ask us to help with a problem.

AI features

When you use an AI feature, the text involved in that action is sent to Anthropic, the company that runs the Claude models, to produce the result. Nothing is sent unless you trigger an AI action yourself. If you save your own Anthropic key, it is stored encrypted on our servers, never sent back to your browser after saving, and your usage is then billed to you by Anthropic rather than counted here.

Connecting other tools

If you connect an assistant over MCP, or create an access token for the API, that connection can read and write your documents on your behalf. A token is stored only as a hash, so it cannot be read back out of the database, and you can revoke one at any time from settings.

Payment

Payments are handled by Stripe. Card details are entered on Stripe and never reach Docmode: we keep only the customer and subscription identifiers Stripe gives us, and which plan you are on. Stripe holds the rest, under its own terms.

Sharing, comments and published pages

A document is private until you share or publish it. Sharing it with somebody by email lets them see it at the level you chose, and sharing a folder reveals the names of everything inside. Comments are visible to everybody the document is shared with, and never appear on a published page or in an export.

Publishing gives a document a public web address. Anyone with the link can read it and search engines may index it. You can also publish a whole folder as a small site of its own, with its own navigation and homepage; the same rules apply to every page in it. We count how many times a published page has been viewed and nothing about who viewed it. Unpublishing takes the page down.

A site can be given a password. We store it as a scrambled fingerprint with a unique random ingredient for that site, never the password itself, and it cannot be turned back into the original. A password keeps a page out of search results and keeps it from being sent to a reader's browser until they enter it correctly, but it is a gate rather than encryption: anyone who is given the password, or who was shown a page while it was unlocked, can share what they saw.

Who else touches the data

Docmode runs on a small set of service providers. Vercel hosts the website, Supabase hosts the database and sign in, Anthropic powers the AI features, Stripe handles payment, Resend delivers email, and Google handles sign in if you choose Google. Each one processes only what its job requires.

Deleting your data

Delete a document and it is gone from the product. You can delete your whole account yourself in settings, and doing so removes your documents, folders, comments, uploads and sessions. Two things are worth knowing first: any page you have published stops existing, and any document you own that you shared with somebody else goes for them too.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Export is built in, so a copy of your writing is always a click away without asking anybody. For anything else, use the contact page. If you are in the EU or the UK and think we have handled your data badly, you can also complain to your national data protection authority.

Questions

Use the contact page. A person reads it.