Privacy Policy

When you use our services, you’re trusting us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control.

This Privacy Policy is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information.

Last updated: January 2026

1. Who We Are

Docvora is a product operated by Weblutions®, a sole trader business registered in Australia.
Business name: Docvora — Weblutions®
Business type: Sole Trader
ABN: 15 484 224 939
Country of Operation: Australia
Contact email: support@docvora.com

This Privacy Policy applies to:

• The Docvora marketing website (docvora.com)
• The Docvora application and management platform
• All Docvora-hosted documentation instances (e.g. *.docvora.com or customised domain)

2. What This Policy Covers

This policy explains:

• What personal data we collect
• How we use and store that data
• How data is handled across Docvora instances
• Your rights regarding your information

By using Docvora, you agree to this Privacy Policy.

3. Information We Collect

3.1 Account Information

When you create or manage an account, we may collect:

• Name
• Email address
• Encrypted (hashed) password
• Account identifiers and settings

3.2 Authentication Data

If you use third-party authentication providers (Google, Discord, Microsoft, GitHub), we may store:

• Provider user ID
• Display name
• Avatar image
• Linked authentication method

We do not receive or store passwords from these providers.

3.3 Security & Audit Data

For security, auditing, and abuse prevention, we may collect:

• IP addresses
• Last login timestamp
• Login history
• Security-related logs

4. User Content & Documentation Data

When you purchase a Docvora instance your documentation content is stored in an independent database separate from the Docvora marketing and management platform.

• Content may include pages, spaces, categories, files, and media.

Content Visibility

• Content can be set as public or private by instance administrators.
• Visibility is controlled entirely by the instance owner.

Ownership of Content

• You retain full ownership of all content you create on an instance.
• Visibility is controlled entirely by the instance owner.

Service Suspension & Deletion

• If a subscription is cancelled or suspended, content becomes inaccessible.
• Users have 30 days to request an export of their data before permanent deletion.

5. Payments & Billing

All payments are collected securely through Stripe.

We store

• Subscription identifiers
• Subscription status and expiry
• Payment amounts and timestamps

We do not store

• Credit or debit card details
• Full billing addresses

All payment information is handled directly by Stripe under their security and compliance standards.

6. Cookies, Local Storage & Analytics

Cookies

We use cookies on the over Docvora websites and instances for:

• Session management
• Authentication
• Basic functionality

Local Storage

On Docvora instances, local storage may be used for:

• UI preferences (e.g. sidebar position)
• Recently accessed content

Analytics

• Google Analytics is used only on the main website (docvora.com)
• No analytics tracking is used within customer documentation instances, unless configured directly by an instance administrator

We do not use personalised advertising or behavioural profiling.

7. Email Communications

We use Twilio's sendGrid to deliver

• Account & Instance notifications
• Security alerts like unexpected logins
• Service-related emails
• Marketing related emails (unless opted out) for accounts registered on the main website (docvora.com)

Email addresses are shared only for email delivery purposes and are not sold or reused.

8. Data Hosting & Security

Content Hosting

Docvora's main website and instances are hosted exclusively with business partner TurboNode, LLC. within the United States and/or Australian locations.

Backups

At times we perform encrypted backups of our systems which are retained for operational and disaster recovery puposes.

Security Measures

We protect data using:

• HTTPS encryption in transit
• Encrypted passwords and sensitive data at rest
• Access controls and audit logging
• Regular security monitoring

9. Data Sharing

We do not sell or rent personal data. We provide data to the following businesses

• Stripe (name and email address)
• Twilio SendGrid (name and email addresses)
• Infrastructure providers required to operate Docvora

All third parties are required to meet appropriate data protection standards.

10. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your account
• Request an export of your data

Requests can be made by contacting support@docvora.com

11. Legal Compliance

Docvora complies with:

• The Australian Privacy Act
• Applicable international data protection principles

Age Requirement

You must be 16 years or older to make a purchase or create a paid Docvora instance.

12. Changes to This Policy

We may update this Privacy Policy from time to time.
Changes will be posted on this page with an updated revision date.

13. Contact Us

For privacy-related questions or requests, contact:
Email: support@docvora.com

Revisions

This section covers all revisions and changes to the Privacy Policy.

No revisions.