Privacy Policy

DocMind is a document extraction platform operated by Wistfare. This policy explains how we collect, use, disclose and protect information when you use the DocMind website, dashboard, APIs and related support services.

We collect account information such as name, email address, organization name, role, authentication events and billing contacts. We also process documents, extraction templates, field definitions and extracted data that your organization submits to DocMind.

Operational data includes API keys metadata, request logs, IP address, user agent, timestamps, token usage, balance transactions, payment callback metadata and webhook delivery outcomes. We do not use customer documents or extraction results to train general-purpose models.

• Provide the dashboard, extraction API, templates, webhooks and billing functions.
• Authenticate users, prevent abuse, investigate security events and enforce organization isolation.
• Measure usage, calculate token-based charges and process Mobile Money top-ups through Wistfare.
• Send transactional email such as OTP codes, invitations, alerts and service notices.
• Improve reliability, support customers and comply with legal, tax and accounting obligations.

We share information only with service providers required to run DocMind, including infrastructure, database, email delivery, payment collection, observability and AI processing providers. These providers process data under contractual confidentiality and data-protection obligations. We may also disclose information if required by law or to protect the rights, safety and security of Wistfare, DocMind, customers or the public.

Account, billing and audit records are retained while the organization is active and as required for legal or accounting purposes. Uploaded documents, inline file payloads and extraction results are retained according to product settings and operational retention rules, then deleted or anonymized. Backups expire on normal backup rotation schedules.

DocMind uses TLS for data in transit, encrypted managed storage where available, role-based access controls, organization-scoped API keys, audit logs and restricted production access. Security incidents are investigated, contained and communicated according to severity and legal requirements.

Depending on your jurisdiction, you may request access, correction, deletion, export or restriction of personal data. Organization administrators can manage much of this information directly in the dashboard. Other requests can be sent through the contact page.

DocMind may process data in countries other than where you are located. Where required, we use safeguards such as contractual commitments, vendor due diligence and transfer terms appropriate to the jurisdictions involved.

We may update this policy as DocMind evolves. Material changes will be announced by email, in-product notice or a clear update on this page. The effective date above identifies the current version.

Questions about privacy or data protection can be sent through the contact page. Include your organization name and the data subject or workspace involved so Wistfare can route the request correctly.