Privacy Policy

Last updated: 13 March 2026

Infotraq Documents ("the App") is a document management application developed by DocPlant Doküman ve Yazılım Hiz. Ltd. Şti. ("we", "us", "our"). This policy describes what data the App collects, how it is used, and your rights regarding that data.

1. Data We Collect

We collect only the minimum data necessary to provide document management services. We do not collect analytics, advertising identifiers, location data, or browsing history.

Data Type	Examples	Linked to Identity	Used for Tracking
Email Address	Account login credential	Yes	No
Name	Full name for display in the app	Yes	No
User ID	Internal account identifier (UUID)	Yes	No
Photos or Videos	Camera captures for document scanning	Yes	No
Files & Documents	Documents uploaded for management	Yes	No
Authentication Data	Password (transmitted securely, never stored on device), session token	Yes	No

2. Data We Do Not Collect

• Location or GPS data
• Device identifiers (IDFA, IDFV, IMEI)
• Browsing or search history outside the app
• Contacts, calendars, or messages
• Health or fitness data
• Financial or payment information
• Advertising or marketing data
• Usage analytics or diagnostics

3. How We Use Your Data

All collected data is used solely for providing document management functionality:

• Authentication — your email and password verify your identity and grant access to your organization's documents.
• Document storage — photos and files you upload are stored securely in your organization's isolated storage bucket.
• AI field extraction — uploaded documents are processed by our private AI system to extract structured data (e.g., invoice numbers, dates). This processing happens entirely on our own infrastructure; no data is sent to third-party AI services.
• Display and search — your name and document metadata are used to display information within the app and enable search.

4. Third-Party Services

The App does not include any third-party analytics, advertising, or crash-reporting SDKs. No data is shared with third parties for tracking or advertising purposes.

The only external communication is between the App and our own servers over encrypted HTTPS connections.

5. Data Storage and Security

• On device: Authentication tokens and session data are stored using the platform's encrypted secure storage (iOS Keychain / Android EncryptedSharedPreferences). No documents or user content are cached on device.
• On our servers: Data is stored in PostgreSQL databases and MinIO object storage with strict multi-tenant isolation. Each organization's data is kept in separate storage buckets with row-level security enforced at the database level.
• In transit: All communication uses TLS/HTTPS encryption.
• Passwords: Passwords are transmitted over HTTPS and stored as bcrypt hashes. Plaintext passwords are never stored.

6. Device Permissions

Permission	Purpose	Required
Camera	Scan documents by taking photos	Optional
Photo Library	Select existing images/documents for upload	Optional
Face ID / Biometrics	Quick sign-in without re-entering password	Optional

All permissions are requested at the point of use and can be revoked at any time through your device's Settings.

7. Data Retention

Your data is retained for as long as your organization maintains an active account. Upon account termination:

• User accounts are deactivated and personal data is removed.
• Documents are retained per your organization's data retention policy.

8. Your Rights

You have the right to:

• Access your personal data held by us.
• Correct inaccurate personal data.
• Delete your account and associated personal data.
• Export your documents.

To exercise these rights, contact your organization's administrator or reach out to us directly.

9. Children's Privacy

The App is a business tool and is not intended for use by children under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the App or via email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

If you have questions about this privacy policy or your data, contact us at:

DocPlant Doküman ve Yazılım Hiz. Ltd. Şti.
Email: privacy@infotraq.com
Web: www.infotraq.com