Comprehensive Privacy Policy
Last updated: March 7, 2026
1. Introduction and Scope
Welcome to Doitly ("we," "our," or "the Platform"). This Privacy Policy aims to inform you in a transparent, comprehensive, and clear manner about how we collect, use, process, share, and protect your personal data and information when you use our website and file conversion services offered at doitlyapp.com (hereinafter, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and agreed to the practices described in this document. Our primary commitment is "Privacy by Design," ensuring that data collection is limited to what is strictly necessary for the operation of our tools.
2. File Processing and "Zero Retention" Policy
The nature of Doitly requires the processing of your personal or business documents. We understand the sensitivity of this information, which is why we have established a high-privacy infrastructure:
Local Processing (Client-Side):
The vast majority of our tools (e.g., QR code generation, basic PDF manipulation) are programmed to execute directly in your browser's memory (Local Storage / WebAssembly). In these cases, your files never leave your device, and Doitly has no technical means to access them.
Server Processing (Cloud):
When an operation requires greater computing power (e.g., PDF to Word conversion), the file is transmitted to our servers using military-grade encryption (TLS 1.3). Once the automated algorithm completes the conversion and you download the result, BOTH files (original and converted) are irreversibly deleted from our infrastructure within a maximum of 1 hour. No one on our team opens, reads, extracts metadata, or backs up your documents.
3. Information We Collect
- Identification and Contact Data: Exclusively when you choose to use our support form, we collect your name, email address, and the content of your message. This information is used solely to follow up on your ticket and is not subscribed to marketing lists.
- Technical and Log Data: Our servers automatically collect standard technical information when you visit the site, including your IP address (anonymized when possible), browser type, operating system, pages visited, and timestamps. This is necessary to prevent DDoS attacks and ensure server stability.
4. User Accounts and Project Data Storage
Voluntary Registration:
Doitly optionally offers the creation of a free user account. Registration is entirely voluntary and its sole purpose is to allow you to save and retrieve projects (such as CVs, invoices, and tool configurations) across sessions and devices.
- Account Data: When you register, we store your email address and a securely hashed password through Supabase's authentication infrastructure. We never store your password in plain text under any circumstances.
- Project Data (JSON): Projects you save (CVs, invoices, etc.) are stored exclusively as structured JSON data. We do NOT store binary files (images, PDFs, documents) in your account. The saved information is limited to text, configurations, and design metadata.
- Deletion: You may request the complete deletion of your account and all associated project data at any time by contacting us through the support form.
5. Cookies and Third-Party Advertising (Google AdSense)
To keep our tools free for the public, Doitly uses Google AdSense to display advertisements. In this regard, you should know:
- Google and its third-party vendors use cookies (including the DoubleClick cookie) to serve ads based on your prior visits to our website and other websites on the Internet.
- The use of these advertising cookies enables Google and its partners to personalize the ads shown to you, making them more relevant to your interests.
- You can opt out of the use of cookies for personalized advertising at any time by visiting the Google Ads Settings.
6. Your Privacy Rights
In accordance with applicable data protection laws, you have the right to Access, Rectify, Cancel, and Oppose the processing of personal data you have provided directly to us.
To exercise these rights, or if you wish us to delete any communication record from our support databases, please contact us via our official form specifying your request. We will process your request within a maximum of 20 business days.
7. Subcontracted Service Providers
We do not sell or trade your data. However, to operate the platform efficiently and globally, we share strictly necessary technical information with highly secure third-party infrastructures:
- Content Delivery Networks (CDN) and Security: For proxy services, DDoS attack mitigation, and fast content delivery.
- Cloud Infrastructure: Private and cloud servers where conversion algorithms run temporarily in isolation.
- Communication Services: External platforms for routing and securely delivering transactional and support emails.
Data Controller
The Doitly team is the data controller responsible for your data.