Privacy policy
The short version: we collect what we need to run DocPin: your account details, the pages you publish, and basic logs that keep the service secure. We don't sell your information and we don't show ads. We count views of your pages without tracking cookies or stored IP addresses, so you can see how often they're opened.
Who we are
DocPin is run by Harrison Bay, based in New Zealand ("DocPin", "we", "us"). We're responsible for your personal information under the New Zealand Privacy Act 2020. You can reach us at hello@docpin.app.
What we collect
- Account details. When you sign in with Google we receive your name, email address and profile picture.
- What you publish. The pages, files, titles, links, boards and workspace names you create, and when you change them. This includes any page data you, your scripts or your AI app send to a page (for example, the numbers on a dashboard), which we store with the page and delete when the page is deleted.
- AI app connections and API keys. Which apps (such as Claude or ChatGPT) you connect, to which workspace, and when. API keys are stored as one-way hashes, so we can't read them back.
- Teammates. When you invite someone we keep their email address, who invited them and when, so the invite link only works for them.
- Custom domains. The domains you connect, and their setup status from Cloudflare.
- Billing. If you buy Pro, Stripe gives us your subscription's status, billing period and the email and billing address on your Stripe account.
- Reports. If you report a page we keep the link, the reason, any details you give, your email if you add it, and a one-way hash of your IP address to limit abuse.
- Technical information. Like most websites, our hosting provider records IP addresses, browser details and the pages requested. We use these to keep DocPin secure and working. We may use Cloudflare's cookie-free analytics to count visits.
- Sign-in storage. The DocPin app keeps your sign-in session in your browser's local storage. We don't use advertising or tracking cookies.
People who view your pages
Pages published on DocPin are shown inside a locked-down frame that can't read cookies. We add a small script to every page so it works properly: links to other sites open in a new tab, the page can read its own page data, the page can see the part of its link after the page name (such as ?tab=pricing or #faq) and update it, and anything the page saves with its browser storage is kept in your browser, under the page's site, for that page only. That script doesn't track you or send anything about you to us. Saved page storage stays in your browser until you clear it. Viewers' requests are logged by our hosting provider as described above. Anything a page itself does is up to the person who published it.
If a page is private, we check who's opening it. For password pages we set a cookie on that site once the right password is entered. For pages limited to certain people, you sign in with Google (or an emailed link); we use your email address to check you're allowed, and set a cookie on that site so you stay signed in for 30 days. Signing in this way creates a DocPin account, which you can delete at any time.
View counts. Each time a page is opened we record the page, the time, the visitor's country and an anonymous visitor ID. The ID is a one-way code made from the IP address and browser, which changes every day, so it can't be traced back to you and we don't store the IP address. If you've signed in on that site to view a page limited to certain people, we also record your email address for the pages you open there while you're signed in. The people in that workspace, and AI apps they connect, can see these counts and the email address, name and profile photo of signed-in viewers. Sign out from the page to stop.
How we use it
- To run DocPin: sign you in, store and serve your pages, and connect your AI apps.
- To keep it safe: prevent abuse, review reports and remove pages that break our terms.
- To support you and tell you about important changes to the service.
- To meet our legal obligations.
Who we share it with
We don't sell or rent your personal information. We share it only with the providers that run DocPin for us, under their own privacy and security commitments:
- Cloudflare: hosting, content delivery and file storage.
- Supabase: our database and sign-in system, hosted in the United States.
- Google: sign-in.
- Stripe: payments for Pro. Stripe collects your card details directly; we never see or store them. We keep your Stripe customer ID and your subscription's status.
When you connect an AI app, that app's provider (for example Anthropic or OpenAI) handles what you do in their product under their own privacy policy. We may also share information if the law requires it, or to protect people from harm.
Where it's stored
Your information is stored outside New Zealand, mainly in the United States, and served from Cloudflare's global network. We choose providers that protect information in a way comparable to the Privacy Act.
How long we keep it
- Your account information, for as long as you have an account.
- When you delete a page, its files are deleted straight away. We keep a small record that it existed.
- When you delete a workspace or your account, its pages, files, links, API keys and app connections are deleted straight away, along with your sign-in details. Reports someone made about your pages are kept, without the link to your workspace.
- Pages we take down for breaking our terms, and the reports about them, are kept for as long as we need them to deal with the issue and meet legal obligations.
- View counts are kept for as long as the page exists, and deleted with it.
- Hosting logs are kept for a limited period, typically no more than 30 days.
Keeping it secure
All connections use HTTPS. Published pages run on a separate, isolated domain. API keys are hashed, and access to our systems is limited. No system is perfectly secure, but we take reasonable steps to protect your information.
Your rights
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete your account. You can also delete your account yourself from the account menu in the app. Email hello@docpin.app and we'll respond within 20 working days. If you're not happy with how we handle your information, you can complain to New Zealand's Office of the Privacy Commissioner.
Children
DocPin isn't meant for anyone under 16, and we don't knowingly collect their information.
Changes
We'll update this page if our practices change, and tell you by email or in the app if the changes are significant.