PRIVACY POLICY
Privacy policy
Last updated 15 July 2026
1. Data controller
This policy explains how personal data is collected and processed in connection with the Docbake service ("Docbake", "we", "us"). Docbake is operated by Miran Alwan, based in Sweden, who is the data controller for the personal data described here. For any privacy matter, or to exercise the rights in Section 9, contact privacy@docbake.com.
2. Personal data we collect
We collect your account details (email address and display name); the documents you upload or let Watcher upload, and the content you create in the editor; and limited usage data needed to run the service — such as which features are used and how much of the daily AI allowance has been spent. If you request an invite or send a message through this site, we process the contact details you provide in order to reply. Submissions from the forms on this site are delivered as email to our own inbox at hello@docbake.com, hosted in the EU by our email provider Strato; they are not stored in any other database, and we keep them only as long as the enquiry is live, at most 12 months.
3. Purposes and legal basis
Your documents are stored in your own private library and used only to serve suggestions back to you. We do not share, sell, or aggregate your content across customers, and we do not put you on a marketing list. We process your account data and content in order to perform our agreement with you (Art. 6(1)(b) GDPR), and we process limited service analytics and abuse-prevention data on the basis of our legitimate interest in operating and securing the service (Art. 6(1)(f) GDPR).
4. AI processing
Suggestions and review passes are processed by trusted AI providers; today we use Google's Gemini API on a paid plan, and under Google's paid API terms the text we send is not used to train Google's models. Uploaded files are parsed, and exports rendered, on Google Cloud Run servers in the EU. We send only what the feature needs — the passage being matched or reviewed, never your whole library. If we engage an additional AI provider, we will update the list in Section 5.
5. Processors
We use a small number of processors, each processing data only on our documented instructions under a data processing agreement: Supabase (database, file storage and authentication — account data and documents, hosted in the EU), Google (Gemini API for AI processing of document text, and Cloud Run in the EU for file parsing and export rendering), Vercel (website hosting and cookieless analytics) and Strato (email, hosted in the EU). The editor itself runs in your browser — the software we build it on does not receive your documents. If we add or replace a processor that handles your personal data, we will update this list and give notice in advance.
6. Transfers outside the EU
Account data, documents and uploaded files are stored and processed in the EU. The one exception is AI processing: text sent to Google's Gemini API may be processed outside the EU. That transfer rests on Google's data processing terms and the EU Standard Contractual Clauses, and the text is not used to train models. If you would like a copy of the safeguards we rely on, ask us.
7. Cookies and analytics
This website sets no cookies and stores nothing in your browser. We use Vercel's cookieless visitor analytics — aggregate page statistics with no tracking cookies and no identifiers that could follow you across visits, which is why no consent banner is shown. If we ever introduce cookies or tracking that requires consent, we will ask first. The application itself sets only what is required to keep you signed in.
8. Retention
Your documents stay in your library until you remove them. You can delete a single document or your whole library at any time, and Watcher will not re-upload what you have removed. When you ask us to delete your account, we remove your documents, your uploaded files and the account itself. Operational logs — which record that a request happened, not what it contained — are kept for reliability and abuse prevention, and are stripped of anything identifying you when your account goes. Every Docbake user belongs to an organization. When you delete your account, your account and your personal data are removed, but content that belongs to your organization's shared workspace remains with the organization for as long as other members remain. When the last member of an organization deletes their account, the organization and its content are deleted.
9. Your rights
Under the GDPR you can request access to the personal data we hold about you, have it corrected or deleted, receive a copy in a portable format, ask us to restrict how we use it, and object to processing we base on our legitimate interest. To exercise any of these rights, or to delete your account, contact privacy@docbake.com; account deletion is handled within 30 days. If you are not satisfied, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
10. Security
We maintain appropriate technical and organisational measures to protect your data: access rules are enforced on every table in the database so that each user can reach only their own data, all traffic is encrypted in transit, and internal services authenticate every call. No method of storage or transmission can be guaranteed to be completely secure. In the event of a personal data breach, we will notify the competent supervisory authority without undue delay — and, where required, within 72 hours — and inform affected users where the law requires it.
11. Changes to this policy
We may update this policy from time to time. Where a change is material, we will revise the date above, tell you before it takes effect, and ask you to review it again.
12. Contact
Questions about privacy: privacy@docbake.com.
TERMS OF SERVICE
Terms of service
Last updated 15 July 2026
1. Introduction
These terms of service ("Terms") govern your access to and use of the Docbake service ("Docbake", "we", "us"), operated from Sweden by Miran Alwan as a sole individual. By creating an account or otherwise using Docbake, you agree to be bound by these Terms. If you do not agree, you must not use the service.
2. The service
Docbake is provided in a private, invitation-only beta, free of charge and at our sole discretion. You have no right to any minimum level of access, availability or continued free use. We may change usage limits, or modify, suspend or discontinue the service in whole or in part, at any time and without notice. We may introduce charges in the future, with reasonable advance notice before any charge applies to you.
3. Eligibility and your account
You must be at least 18 to use Docbake. Accounts are personal to you: you are responsible for keeping your credentials confidential and for all activity that occurs under your account, and you must notify us promptly if you believe someone else has used it.
4. Your content
Everything you upload or write stays yours, and we claim no ownership of it. You grant us only the limited rights necessary to operate the service on your behalf — storing your content, indexing it for your own library, and processing it when you use a feature. We may use aggregated and de-identified data derived from use of the service — data that neither identifies you nor reveals the contents of your documents — to maintain, secure and improve Docbake. We do not use the contents of your documents to train AI models.
5. AI output
Suggestions are generated with AI and can be wrong. You are responsible for reviewing anything Docbake proposes before it goes into a document you rely on — the service assists your writing, it does not replace your judgment.
6. Acceptable use
You may use Docbake only for lawful purposes and in accordance with these Terms. You must not use the service in any way that is unlawful, infringes the rights of others, disrupts or overburdens the service or its infrastructure, or attempts to circumvent its usage limits, access controls or security.
7. Data protection
Our processing of personal data is described in our privacy policy, which forms part of these Terms. Where you use Docbake to process personal data for which you act as controller, a data processing agreement (DPA) is available on request.
8. Beta disclaimer
The service is provided on an "as is" and "as available" basis during the beta. Features may change, limits may be adjusted, and interruptions may occur, including as a result of the third-party providers on which Docbake depends. Docbake is a library maintained over your archive and is not a substitute for it; keep your own copies of anything critical.
9. Limitation of liability
To the maximum extent permitted by applicable law, our total aggregate liability arising out of or in connection with the service or these Terms shall not exceed the amount you have paid for the service in the twelve months preceding the event giving rise to the claim — which, during a free beta, is nil. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law.
10. Termination and enforcement
You may stop using Docbake and delete your data at any time. If you breach these Terms or use the service in a way we reasonably consider abusive, we may throttle, suspend, restrict or terminate your access, and we will inform you of the reason where reasonably possible.
11. Amendments to these Terms
We reserve the right to modify these Terms from time to time. Where a modification is material, we will provide reasonable prior notice before it takes effect and ask you to accept the updated Terms. Your continued use of the service after the change takes effect constitutes acceptance. If you do not agree to the revised Terms, you must discontinue use of the service.
12. Governing law
These Terms are governed by Swedish law. Any dispute shall be settled by the Swedish courts.
13. Contact
Questions about these Terms: hello@docbake.com.