Last updated: October 2026
This describes what Docluster collects and why. We collect the minimum needed to run the service.
| Data | From | Why |
|---|---|---|
| Name, email, hashed password | You, at signup | Account creation and login |
| Google profile (name, email, avatar) | Google Sign-In, if used | Alternative login |
| Uploaded documents | You | Storage and sharing |
| Workspace name, logo, description | You | Branding shown to your visitors |
| Visitor name/email, NDA acceptance | People who open your share links | The access gates you configured, on your behalf |
| View/download timestamps, page dwell time, IP-derived device info | Automatically, on link activity | The analytics feature |
| Plan purchases, amounts, invoice details (name, email); card, UPI and bank details are entered with Razorpay, never with us | You, when you pay; Razorpay | Billing, invoices, and accounting records |
| Pages visited, browser and device type, approximate location, how you reached the site (for example, an ad you clicked), and whether you signed up | Google Analytics, on every page of this site | Understanding how the site is used and measuring our advertising |
To provide and improve the service: authenticating you, serving your documents, computing the analytics you see, and enforcing plan limits. We don't sell personal data.
To run the service and support you, our administrators can see account details (names and email addresses of a workspace's members), plan and payments, and usage figures such as how many documents, links and signatures a workspace has and how active it is. They don't open your documents, see their names, or see who opened your shared links.
We use infrastructure providers (cloud hosting and object storage) to run Docluster; they process data on our behalf under their own security commitments. Payments are processed by Razorpay, and account and invoice emails are sent through an email delivery provider. We don't share your documents or visitor data with anyone else.
When you add a digital signature, a cryptographic fingerprint of that signature (never the document, your name or your email) is sent to DigiCert's public timestamp service, which returns a certificate of the time. That timestamp is stored inside the signed file.
We use Google Analytics and Google Ads to see how people find and use Docluster and whether our ads lead to sign-ups. Google receives the usage data described above under its own terms (how Google uses data from sites that use its services). It never receives your documents, and the private codes in share, invite, signing and password-reset links are removed from page addresses before anything is sent.
Your documents and account data are kept while your account is active. Deleting a document or your account removes it from active storage; backups age out on a routine schedule.
When you delete your account, workspaces you own on your own are deleted with all their files. In workspaces that belong to someone else you simply leave: documents, share links and signatures you added there stay with that workspace, and its activity history still shows what you did, because they are that workspace's records. Your name and email are removed from your account itself. If you used the free trial, we keep only a one-way, keyed fingerprint of your email address — not the address — so the same address can't start a second free trial.
We use one essential, httpOnly cookie to keep you signed in (a refresh token). Google Analytics also sets its own cookies (their names start with “_ga”) to tell visits apart and to link a sign-up to the ad that led to it. These are optional, and Docluster works the same without them.
In the European Economic Area, the UK and Switzerland, Google Analytics stores no cookies unless you accept them, and we ask first. Wherever you are, you can change your choice at any time: Cookie settings. Your choice is remembered in your browser. You can also block these cookies in your browser settings or with Google's Analytics opt-out add-on, and manage ad personalisation at My Ad Center.
We may update this policy as the product evolves. Material changes will be reflected here with an updated date.
Questions about this policy? Reach out at support@docluster.com.