Privacy Policy.
Last updated: 24 September 2026
Our promise in plain English
DocShop converts, merges, and splits documents. Prices are on the site before you upload. We do not read your files, train on them, or sell your data. This page explains what we collect and how long we keep it.
- We delete your file within 1 hour. No exceptions.
- We never read your file. Conversion runs in an isolated container with no human access.
- We never train on your file. We don't have AI models; we never will.
- We never sell your data. We don't collect anything to sell.
What we collect
From everyone (anonymous or signed-in):
- IP address (for rate limiting, retained 24 hours)
- Browser fingerprint hash (for rate limiting)
- Conversion metadata: tool used, file size, format, timestamp, status
From signed-in users additionally:
- Email address
- Conversion history (90-day retention for Pro and Max)
- Stripe customer ID (for billing)
We never collect file content. Once your conversion completes (or after 1 hour, whichever comes first), the file is deleted.
Cross-border data
Your files are processed in Google Cloud data centers in the United States. By using DocShop, you consent to this transfer. Google Cloud maintains equivalent or stronger security certifications than most Canadian data centers, including ISO 27001, SOC 2, and SOC 3.
Your rights
- Access: Email privacy@docshop.co for a copy of your account data.
- Correction: Update your email and preferences from your account page.
- Deletion: Email privacy@docshop.co to delete your account.
Cookies and ads
We use Plausible Analytics, which does not use cookies and does not track you across sites. Free pages may show Google ads. AdSense may set advertising cookies to serve those ads. Pro and Max do not show ads. We do not use a Facebook pixel.
Contact
Questions or concerns: privacy@docshop.co
We will update this page if our practices change.