Privacy

ItsDocDoc is a product operated by Growth Catalyst Crew LLC, a limited liability company based in Augusta, Georgia, United States.

Accounts are handled by Supabase Auth. Signing in stores your email address and an authentication session cookie. That cookie keeps you signed in; it is not used for advertising or for tracking you across other sites.

Your workspace records the name you gave it and your role within it.

Documents you upload are stored as objects with Backblaze B2, and their metadata — title, description, classification, version history — in a PostgreSQL database hosted by Supabase. The application runs on Vercel.

Your documents are scoped to your workspace at the database level. They are reachable from outside it only through a share link you created, and only for as long as that link is active.

When a recipient opens a share, ItsDocDoc records the type of event, the time it happened, which asset and version was opened, a session key generated by the recipient’s browser, and the browser’s user-agent string.

No IP address and no location are recorded. There is no column for either. A tracked link tells you that the link you gave to a particular contact was opened. It is not proof of who was holding the device, and ItsDocDoc does not present it as one.

Recipients are not asked to create an account, install anything, or identify themselves in order to open what you sent them.

There is no third-party analytics in this product. No Google Analytics, no advertising pixel, no session-replay tool, no behavioural tracking of any kind. The engagement figures you see are computed from ItsDocDoc’s own records and are not sent anywhere else.

The services ItsDocDoc depends on in order to run are Supabase (authentication and database), Vercel (hosting) and Backblaze B2 (file storage).

Authentication cookies only, set by Supabase so that your session survives a page load. There are no advertising or analytics cookies, which is why this site does not ask you to accept any.

Archiving an asset withdraws it from active use in your workspace without destroying it. Revoking a share stops that link opening.

Permanently deleting an asset removes its stored files from object storage as well as its records — the files go first, so a failure cannot leave bytes behind with nothing pointing at them.

Engagement records survive that deletion in anonymised form. The event keeps its time, type and session and loses the reference to the document, so your historical counts stay accurate while the thing they referred to stops being identifiable.

You can ask what information is held about you, ask for it to be corrected, or ask for it to be deleted. Write to us and we will action it.

Post reaches us at the address in Who operates ItsDocDoc.