Privacy Policy

Last updated: April 25, 2026

The short version: Most of our PDF tools run entirely in your browser — your files never leave your device. A few tools (CV Maker's Resume Import, CV Tailor, server-side conversions, and saved OCR / Bulk Invoice batches) do send data to our servers and disclosed AI providers; we explain exactly which ones below, what we send, and what we never store.

1. Who We Are

DocuSmartly is a free online PDF and CV tool suite operated by the DocuSmartly Team. Our website is https://docusmartly.com. For privacy enquiries, write to docusmartlyhelp@gmail.com.

2. How Each Tool Handles Your Files

We don't make blanket "everything stays in your browser" claims because that wouldn't be accurate for every tool. Here's the honest breakdown:

ToolWhere processing happensWhat we send
Split, Merge, Compress, Edit, Sign, Images to PDF, PDF to TIFF 100% in your browser Nothing — your file never leaves your device.
Word to PDF, PowerPoint to PDF, Excel to PDF, Protect PDF On our server (LibreOffice / qpdf) The file is uploaded, converted in memory, the result is returned to you, and the source file is discarded immediately. We do not log or back up uploaded files.
OCR PDF / Bulk Invoice Extraction Text recognition in your browser; saved batches on our server The OCR itself runs in your browser (Tesseract.js) — your scan isn't uploaded just to read it. If you save or extract a batch (multi-document results, templates, Excel export), the document and its recognised text are uploaded, stored, and automatically deleted within 24 hours. Never logged, never backed up.
CV Maker (form & templates) In your browser Your CV form data is saved only in your browser's localStorage. The PDF is generated client-side. Nothing is sent to our server unless you trigger an AI feature below.
Resume Import (CV Maker) Server + Groq AI Your uploaded PDF/DOCX is sent to our server, the text is extracted in memory and forwarded to Groq for AI parsing. The original file is discarded after the request; only the parsed structured fields are returned to your browser.
CV Tailor (JD-based) Server + Google Gemini The Job Description and CV text you provide are sent to our server and forwarded to Google Gemini for analysis. We don't store the inputs after the request completes.
Smart Extract (AI field extraction) Server + Google Gemini (Groq fallback) Your PDF text is sent to our server and forwarded to Google Gemini (or Groq as an automatic fallback) to read the fields you request. The file is held in memory only — no copies are stored on disk, and we do not log document contents.
Pallavi AI (intent assistant) Server + Groq AI Only the natural-language command you type (e.g. "compress this PDF") is sent to Groq — never the file itself. Used to choose the right tool and parameters.

3. AI-Powered Features — Detailed Disclosure

3.1 What we send to AI providers

  • Groq (Resume Import): The text extracted from your uploaded resume.
  • Google Gemini (CV Tailor): The Job Description text and your CV text that you paste / upload.
  • Groq (Pallavi AI): Only the chat command you type. Never your files.

3.2 What we do NOT do

  • We do NOT train, fine-tune, or contribute to training any AI model on your CV, resume, or job-search data.
  • We do NOT sell your data to recruiters, recruiters' agencies, advertisers, or any third party.
  • We do NOT retain uploaded resumes or CV inputs on our server beyond the duration of the request that processes them.
  • We do NOT log resume content or JD/CV text in our application logs.
  • We do NOT share your personal information with anyone other than the service providers listed in Section 7 (and only to the extent each service is named for above).

3.3 What our AI providers do with the data

We rely on contractual and policy commitments from our processors. Per their public privacy policies and API terms at the time of writing:

  • Groq — does not use API inputs or outputs to train models. (See groq.com/privacy-policy.)
  • Google Gemini API — paid-tier API inputs are not used for training. (See ai.google.dev/gemini-api/terms.)

These providers may temporarily store request data for abuse prevention and service operation per their own retention schedules. We do not control those independent retention periods.

Your control: AI features are opt-in by action — you decide when to upload a resume, paste a JD, or type a Pallavi AI command. None of these features are triggered automatically.

4. Account Information

Account creation is optional. All free tools work without an account. If you do create one (required to buy or subscribe to premium CV templates), we collect:

  • Email address — for login and order receipts
  • Name — for display and for personalising your CV downloads
  • Password — stored as a bcrypt hash; we cannot read or recover your password
  • Subscription & purchase records — what you bought, when, and the Razorpay payment ID (no card numbers)

Sign in with Google (optional): Instead of a password, you can sign in with your Google account. When you do, Google sends us a verified token from which we read only your email address and name to create or access your account — we never receive or store your Google password. This is entirely optional; email-and-password sign-in remains available. Google's handling of the sign-in is governed by Google's own Privacy Policy.

5. Payment Information

Payments are processed exclusively through Razorpay, a PCI-DSS Level 1 compliant payment gateway. We never see, store, or have access to your card numbers, CVV, bank account details, or UPI IDs. Razorpay handles all card data directly. We only receive a transaction reference (payment ID and signature) so we can mark your purchase as complete.

6. Cookies, localStorage & Analytics

  • Authentication cookie (dsm_auth): A signed httpOnly cookie issued only after you sign in. Used to keep you logged in for 30 days. Not accessible to JavaScript.
  • Razorpay cookies: Set by Razorpay's checkout script for fraud prevention during payment.
  • Google Analytics (GA4): Anonymised pageview and event data. You can opt out via the cookie consent banner.
  • localStorage: Stores your CV draft, language preference, theme, and (for CV Tailor / AI features) your daily usage counters. This data lives only in your browser and never reaches our server unless you explicitly trigger an action that sends it.

7. Third-Party Services (Sub-Processors)

The companies below process some of your data on our behalf, strictly to provide the features described above:

  • Razorpay — payments. Privacy policy
  • Groq, Inc. — resume parsing & Pallavi AI. Privacy policy
  • Google (Gemini API) — CV Tailor AI. Privacy policy
  • Google Analytics — website analytics. Privacy policy
  • Cloudflare — CDN, DNS, and DDoS protection for our site and library assets. Privacy policy
  • Railway — cloud infrastructure that hosts our backend and database. Privacy policy
  • Google Fonts — web fonts (used in CV Maker)

8. Data Retention

  • Uploaded files (PDFs, DOCX, resumes for conversion & AI features): Discarded immediately after the request that processes them. Not backed up. Not logged.
  • Saved OCR / Bulk Invoice batches: When you save or extract a batch, the uploaded documents and their extracted data are stored on our server and automatically deleted within 24 hours of creation.
  • CV form data: Stored in your browser's localStorage until you clear it. Never reaches our server unless you use Resume Import / CV Tailor.
  • Account data (email, name, hashed password): Retained until you delete your account.
  • Subscription & purchase records: Retained for at least 7 years to comply with Indian tax / accounting law (Income-Tax Rules require records of business transactions to be preserved). After that, they may be anonymised.
  • Analytics data: Retained per Google Analytics 4 default of 14 months.
  • AI usage counters (in your browser): Reset daily.

9. Your Rights

Whether you're in India (Digital Personal Data Protection Act, 2023), the EU (GDPR), or anywhere else, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data (you can edit your name / email any time from your account)
  • Delete your account and associated personal data (use the "Delete Account" button in your account settings)
  • Withdraw consent for analytics via our cookie banner
  • Export your data — email docusmartlyhelp@gmail.com with the subject "Data Export Request"
  • Lodge a complaint — in India, with the Data Protection Board; in the EU, with your local supervisory authority

10. Children's Privacy

Our service is not intended for children under 13 (under 18 for users in jurisdictions where the Digital Personal Data Protection Act, 2023 requires parental consent for minors). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will delete it.

11. International Data Transfers

Some of our service providers (Groq, Google) operate servers outside India. By using our AI features, you consent to your input data being transferred to and processed in those jurisdictions, governed by the providers' own contractual safeguards (Standard Contractual Clauses where applicable).

12. Security

We use industry-standard safeguards, including HTTPS for all traffic, bcrypt password hashing, httpOnly cookies for authentication, and least-privilege access to our database. No system can guarantee absolute security; if we ever suffer a breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

13. Changes to This Policy

We may update this policy as our tools evolve. The "Last updated" date at the top reflects the most recent revision. Material changes (e.g. adding a new sub-processor or AI provider) will be highlighted by a banner notice on the site for at least 14 days.

14. Contact

For any privacy question, complaint, or data request, email docusmartlyhelp@gmail.com. We aim to respond within 7 business days.