DocuDue

Privacy Policy

How DocuDue collects, uses, and protects your information. Effective date: October 14, 2026.

At a glance

  • Document access is restricted to your account and, where sharing is enabled, authorized members of your workspace. Service providers process information as described below.
  • We never sell your documents, records, or personal information.
  • Passwords are handled by Clerk; full card details are handled by Stripe. We never see or store either.
  • You can enable two-factor authentication (MFA) and delete your documents and files at any time.

1. Introduction

This Privacy Policy explains how DocuDue ("DocuDue", "we", "us") collects, uses, and shares information when you use the DocuDue website and application at getdocudue.com (the "Service"). By using the Service, you agree to the practices described here.

2. Information We Collect

We collect the following kinds of information:

  • Account information — your name and email address, provided through Clerk, our authentication provider. DocuDue does not see or store your password.
  • Documents and records — the document names, categories, expiration dates, reminder dates, and notes you enter, and any files (PDFs or images) you choose to attach and store.
  • Workspace information — the workspace associated with your account and, where membership features are enabled, member roles and pending invitations (invitee email addresses). If your workspace has other authorized members, those members can access its documents. This describes how information is handled, not a promise that team access or shared workspace features are included in every plan. The public Pricing page currently lists those features as coming soon; see that page for current plan availability.
  • Notification settings — your reminder preferences and any additional reminder recipient email addresses you add.
  • Payment information — if you subscribe to a paid plan, payments are processed by Stripe. We store only references such as your Stripe customer and subscription identifiers and your plan; we never see or store your full card details.
  • Usage and log data — technical request and error information used to operate and secure the Service, and account activity such as signed-in visits, first document saves, upgrade selections, and billing outcomes used for administrative usage reports. We do not include document text in those activity events.

3. How We Use Information

We use your information solely to provide and improve the Service:

  • to store and display your documents to you and any authorized members where workspace sharing is enabled;
  • to send email reminders before your documents expire, to you and the reminder recipients you configure;
  • to process subscription payments and manage your plan;
  • to secure accounts, prevent abuse, and enforce plan limits;
  • to respond to feedback and support requests;
  • to comply with legal obligations.
  • We do not sell your personal information, and we do not use the contents of your documents for advertising.

4. AI Document Analysis

If you use smart date extraction, the file you upload for analysis is sent to Google's Gemini API through Replit's AI integration to suggest a document name, category, and dates. The analysis upload is processed in server memory and is not saved by DocuDue as an attached file. A saved attachment uses a separate upload and document-save step. Google and Replit process analysis requests under their applicable terms; we do not promise that these providers never retain inputs.

Suggested dates are never saved automatically. You review and can edit every suggested field, including the expiration date, before you save the document.

Only upload files you are comfortable processing this way. For extra-sensitive documents — such as medical records, financial statements, Social Security cards, or full ID scans — consider entering the dates manually instead.

5. When We Share Information

Where workspace sharing is enabled for your account, documents are accessible to authorized workspace members, not the public. This policy does not activate sharing or change your plan's features.

We also share information with the service providers we rely on to operate DocuDue, only to the extent needed to provide the Service:

  • Clerk — authentication and sign-in security;
  • Stripe — subscription payments and billing;
  • Resend — delivery of reminder and notification emails;
  • Google (Gemini API) — AI document analysis, when you use smart date extraction;
  • Replit — application hosting, database, and file storage infrastructure.
  • We may also disclose information if required by law, to protect the rights, safety, or security of DocuDue or others, or in connection with a merger, acquisition, or sale of assets (in which case this policy continues to apply to your information).

6. Data Retention and Deletion

Saved document records and settings are stored in the application database. Files you choose to attach are stored separately in Replit App Storage and served through authorization checks against your workspace. Analysis alone does not save an attachment.

You can delete documents from the app. An attachment shared by more than one document is retained while another authorized document still references it. Files without a remaining reference are removed through the attachment cleanup process; storage failures may delay removal and require a later retry. We do not promise immediate erasure from backups or service-provider systems.

The browser-only demo is separate from your account. If you explicitly choose to keep a demo document, its text and date fields may remain in this tab for up to one hour for review after signup. Attachments are not copied, and nothing is saved to your account until you review and save it.

If you want your account and all associated data deleted, contact us at support@getdocudue.com or through our contact page at getdocudue.com/contact and we will process the request within a reasonable time. Some minimal records (such as billing history required for tax and accounting) may be retained where legally required.

7. Security

We take practical steps to protect your information: connections to the Service are encrypted in transit (HTTPS), documents are scoped to your account and workspace, sign-in is handled by Clerk, and you can enable app-level two-factor authentication (MFA) in Settings for additional protection.

No online service can guarantee perfect security. Please use a strong, unique password and enable MFA, and only store files you are comfortable keeping in a cloud service.

8. Your Rights and Choices

You can view, edit, and delete documents and change reminder settings in the app. Where workspace membership controls are available, access depends on your role; an owner may need to transfer ownership before leaving. You can cancel a paid subscription through the billing portal on the Pricing page.

Depending on where you live, you may have legal rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at support@getdocudue.com or at getdocudue.com/contact.

9. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice, such as by email or a notice in the app, before the changes take effect. The "Effective date" above shows when this policy was last revised.

11. Contact

Questions about privacy or this policy? Email us at support@getdocudue.com or use the contact form at getdocudue.com/contact and we will get back to you.