Privacy Policy

1. Introduction

TrueDoc ("TrueDoc," "we," "our," or "us") is an AI-powered document and image verification platform available at https://truedoc.io.

TrueDoc is operated by Cyber Logic, a business operating in Canada.

For the purposes of applicable data protection laws, including the General Data Protection Regulation ("GDPR") and Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"), Cyber Logic acts as the data controller for personal data processed through TrueDoc, unless otherwise stated in a separate written agreement.

We are committed to protecting your personal data and being transparent about how we collect, use, process, store, and safeguard information.

2. Information We Collect

3. Legal Basis for Processing

Where GDPR or similar laws apply, we process personal data under one or more of the following legal bases:

• •Performance of a contract, including providing document verification services
• •User consent, where required
• •Legitimate interests, including fraud prevention, platform security, product improvement, abuse prevention, and business operations
• •Compliance with legal obligations
• •Protection of our rights, users, and platform

4. How We Use Your Information

We use collected information to:

• •Analyze and verify uploaded documents and images
• •Detect possible fraud, manipulation, inconsistencies, or AI-generated content
• •Generate verification reports
• •Provide user dashboards and report history
• •Manage user accounts and business workspaces
• •Process subscriptions and payments
• •Enforce plan limits and usage limits
• •Provide support and service updates
• •Improve platform reliability, accuracy, and security
• •Prevent abuse, misuse, fraud, or unauthorized access
• •Comply with legal and regulatory obligations

5. AI Processing Notice

TrueDoc uses artificial intelligence and automated analysis systems to help evaluate uploaded content.

AI-generated outputs are probabilistic assessments. They should not be treated as definitive legal, compliance, immigration, financial, employment, housing, credit, insurance, law-enforcement, government, or identity determinations. Users remain responsible for independent decision-making when relying on TrueDoc results.

TrueDoc may use multiple analysis layers, including document parsing, image analysis, fraud-signal detection, metadata checks, visual review, and reasoning models. These systems are used to produce verification results and reports.

6. Document Processing and Retention

TrueDoc follows a privacy-first document handling model.

6.1 Original Uploaded Documents

Original uploaded documents are used only for processing and verification.

By default, original uploaded documents are deleted after analysis is completed.

This means TrueDoc does not retain original passports, driver licenses, paystubs, bank statements, receipts, invoices, or similar uploaded documents by default after the analysis workflow is complete.

6.2 Redacted Reports

TrueDoc may retain redacted verification reports according to your plan.

Redacted reports may include:

• •Trust score
• •Risk level
• •Verdict
• •Recommended action
• •Document type
• •Fraud indicators
• •Verification signals
• •Redacted text snippets
• •Report metadata
• •Retention and expiration information

Redacted reports do not contain the original uploaded file.

6.3 Report Retention by Plan

Report retention may vary by plan:

• •Free: 30-day redacted report retention
• •Pro: 90-day redacted report retention
• •Business Starter: 90-day redacted report retention
• •Business Growth: 180-day redacted report retention
• •Business Scale: 365-day redacted report retention
• •Enterprise: Custom retention options

Enterprise customers may have custom retention settings, including shorter or longer report retention, customer-controlled storage, or other agreed retention terms.

6.4 Analytics and Fraud Metadata

TrueDoc may retain safe analytics and fraud-signal metadata for product analytics, audit history, security, billing, usage tracking, fraud trend analysis, and service improvement.

This may include:

• •Analysis ID
• •Document type
• •Trust score
• •Risk level
• •Verdict
• •Fraud-signal codes or categories
• •Module-level scores
• •Processing timestamps
• •Usage and plan information

We do not use analytics storage to retain original uploaded documents.

6.5 Account and Billing Data

We retain account, billing, subscription, and transaction records as needed for business operations, accounting, tax, legal, security, and compliance purposes.

7. Sensitive Document Handling

Uploaded documents may contain sensitive personal information. Users and customers are responsible for limiting uploads to documents necessary for a lawful verification purpose and avoiding unnecessary or excessive personal data.

Customers represent that they have all required rights, permissions, notices, consents, and legal bases to upload documents and personal data to TrueDoc, including documents containing sensitive personal information.

8. Data Security

We use reasonable technical and organizational safeguards to protect data, including:

• •Encryption in transit using HTTPS/TLS
• •Encryption at rest where supported by our infrastructure providers
• •Access controls and authentication safeguards
• •API key protection for backend services
• •Role-based access controls for workspaces
• •Logging and monitoring
• •Separation between original uploaded files, redacted reports, and analytics metadata
• •Privacy-first deletion of original source files after processing
• •Restricted access to internal technical details

No system is 100% secure, but we take reasonable and appropriate measures to protect user data.

Cyber Logic has designated privacy contact responsibility for handling privacy requests, security incidents, and data protection inquiries. We maintain internal records of material security and confidentiality incidents where required by law.

9. Service Providers and Data Sharing

We do not sell personal data.

We may share limited information with trusted service providers that help us operate TrueDoc, including providers for:

• •Cloud hosting and storage
• •Document processing
• •AI processing
• •Authentication
• •Analytics and logging
• •Payment processing
• •Email and customer support
• •Security monitoring

Service providers are authorized to process data only as needed to provide services to TrueDoc and are expected to use appropriate safeguards.

We may also disclose information:

• •When required by law, subpoena, court order, or legal process
• •To protect the rights, safety, and security of TrueDoc, users, or the public
• •To investigate abuse, fraud, or security incidents
• •With your consent
• •As part of a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to appropriate protections

10. AI and Automated Processing Providers

TrueDoc may use third-party infrastructure, storage, AI processing, authentication, payment, analytics, and security providers to operate the Service.

AI and automated analysis providers may change over time. TrueDoc may add, remove, or replace providers, models, processors, or detection methods to improve accuracy, security, availability, or performance.

Where visual or AI-based processing is used, it is used to provide verification and fraud-risk analysis. TrueDoc does not use original uploaded sensitive documents to train public AI models.

11. International Data Transfers

TrueDoc and its service providers may process data in countries including:

• •United States
• •Canada
• •Other jurisdictions where our service providers operate

Where required, we use appropriate safeguards for cross-border transfers, including contractual, organizational, and technical protections.

12. Your Rights

Depending on your location, you may have the right to:

• •Access your personal data
• •Request correction of inaccurate data
• •Request deletion of personal data
• •Withdraw consent where processing is based on consent
• •Object to certain processing
• •Request restriction of processing
• •Request portability of your data
• •Opt out of marketing communications

To exercise your rights, contact: privacy@truedoc.io

We may need to verify your identity before completing certain requests.

13. Cookies, Analytics, and Communications

We may use cookies and similar technologies to:

• •Keep users signed in
• •Improve platform functionality
• •Understand usage trends
• •Improve user experience
• •Monitor security and reliability
• •Support analytics and performance measurement

You can manage or disable cookies in your browser settings. Some platform features may not work properly if cookies are disabled.

We aim to use analytics in a privacy-conscious manner and avoid invasive personal tracking.

Marketing emails will include an unsubscribe mechanism where required by law. Service, billing, security, and transactional messages may still be sent as necessary to operate the Service.

14. Children's Privacy

TrueDoc is not intended for individuals under 18 years old.

If we become aware that we have collected personal data from a minor, we will take steps to delete it promptly.

15. Customer Responsibilities

Users are responsible for:

• •Uploading documents only when they have the legal right or authorization to do so
• •Using TrueDoc results responsibly
• •Independently reviewing verification results before making important decisions
• •Complying with applicable laws, regulations, and internal policies
• •Avoiding use of TrueDoc for unlawful, discriminatory, or unauthorized purposes
• •Providing required notices and obtaining required consents before uploading third-party documents or personal data

TrueDoc provides verification assistance and fraud-risk signals, but it does not replace professional, legal, compliance, or identity-verification judgment.

16. Important Notice: No Consumer Reporting or Automated Decisions

TrueDoc is not a consumer reporting agency and does not provide consumer reports, background checks, credit reports, tenant screening reports, employment screening reports, or eligibility determinations under the Fair Credit Reporting Act or similar laws.

Customers are responsible for determining whether their use of TrueDoc triggers any legal obligations, including notice, consent, adverse action, accuracy, dispute, human review, anti-discrimination, or other requirements.

TrueDoc results are advisory risk signals only. Customers must not rely solely on TrueDoc to approve, reject, hire, rent to, onboard, deny services to, or otherwise make high-impact decisions about a person. Customers are responsible for human review, independent verification, and compliance with applicable laws.

17. Updates to This Policy

We may update this Privacy Policy from time to time.

If material changes are made, we may notify users through the website, application, or email where appropriate.

The "Last updated" date at the top of this policy indicates when it was last revised.

18. Contact Information

TrueDoc Privacy Team

Operated by Cyber Logic