Legal
Privacy Policy
Last updated: 23 March 2026 · Effective: 23 March 2026 · Governing jurisdiction: Australia
Summary: DocGate processes PDF documents you submit to perform compliance audits. Documents are sent to Claude AI via AWS Bedrock (private cloud) for analysis. We do not sell your data, and your documents are never used to train AI models.
1. Who We Are
DocGate ("we", "us", "our") is an AI-powered document compliance service operated in Australia. We are subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Contact: privacy@docgate.ai
2. What Information We Collect
Account Information
- Name and email address (when you register)
- Organisation/team name
- Billing information (processed by Stripe — we do not store card details)
Documents You Submit
- PDF files forwarded to your team's DocGate email address or uploaded via the web portal
- These may contain commercial information including ABNs, policy numbers, names, and business addresses
- The sender's email address is recorded for reply purposes
Usage Data
- Audit history, compliance scores, and results
- AI processing costs per review
- Timestamps and document metadata
3. How We Use Your Information
- To perform document compliance audits and return results to you
- To display audit history in your dashboard
- To calculate and display per-review AI costs
- To process subscription payments via Stripe
- To send transactional emails (audit reports, account notifications)
- To improve the reliability and accuracy of our service
We do not use your documents or data for marketing, sell it to third parties, or use it to train AI models.
4. AI Processing & Third-Party Services
Important: Documents submitted to DocGate are processed by Claude AI via AWS Bedrock — a private cloud deployment. AWS and Anthropic explicitly do not use Bedrock customer data to train AI models. Your documents remain within AWS infrastructure.
We use the following third-party services to operate DocGate:
- AWS Bedrock (Anthropic Claude) — AI document analysis. Region: ap-southeast-2 (Sydney). Data is not used for model training.
- Neon (PostgreSQL) — Database storage. Region: ap-southeast-2 (Sydney, AWS).
- Resend — Inbound and outbound email processing.
- Upstash (Redis) — Job queue for background processing. Region: ap-southeast-2 (Sydney).
- Stripe — Payment processing. Card data is never stored by DocGate.
- Netlify — Hosting of this marketing website.
5. Data Retention
- Audit results (scores, rules, reasoning) are retained for the lifetime of your subscription to provide dashboard history.
- PDF documents are not stored by default. Documents are processed and discarded unless you enable the optional PDF storage feature.
- Account data is retained until you request deletion.
- On account closure, your data is deleted within 30 days.
6. Your Rights Under Australian Privacy Law
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your data
- Make a complaint to the Office of the Australian Information Commissioner (OAIC)
To exercise these rights, email privacy@docgate.ai. We will respond within 30 days.
7. Data Security
We implement appropriate technical and organisational measures to protect your data including:
- TLS encryption in transit for all data
- Encrypted database storage
- API key authentication and rate limiting
- HMAC signature verification on inbound webhooks
- AWS Bedrock private cloud (no public API exposure of your documents)
8. Cookies
The DocGate application uses session cookies for authentication only. We do not use tracking or advertising cookies. The marketing website (docgate.ai) uses no cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email of material changes. The "Last updated" date at the top of this page indicates when the policy was last revised.
10. Contact & Complaints
For privacy enquiries: privacy@docgate.ai
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or call 1300 363 992.