DocMorph Studio ("the Platform") is a local-first online workspace providing document conversion, media privacy sanitization (EXIF/GPS/metadata scrubbing), flowchart drawing, and Markdown reading tools.
We adhere strictly to data minimization and user sovereignty. Except for optional cloud features explicitly initiated by the user, all core document and media operations run 100% locally in your browser (WebAssembly/Web Worker) — zero document bytes are uploaded to our servers.
1. Introduction and Scope
This Privacy Policy applies to the DocMorph Studio website, web applications, and browser extensions. We value your personal information and implement technical safeguards in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable privacy legislation.
2. Information We Collect and Purpose of Processing
We collect and process only the minimal data strictly required to deliver our services:
Core Document & Media Files (100% In-Browser · Zero Upload): For PDF to Word, local OCR, document comparison, and image/video/audio metadata scrubbing, processing executes entirely inside your browser memory. Document contents never touch our servers.
Technical Cookies & Pseudonymous Device UID (dm_uid): On your initial visit, our server issues a pseudonymous cookie named dm_uid (valid for 1 year) signed via HMAC-SHA256 to manage daily free quotas without forcing account registration and to prevent bot abuse. It contains no hardware serials, MAC addresses, or real-world identities. Users can reset or delete this identifier at any time.
Third-Party Advertisements (Google AdSense): To sustain free processing resources and hosting costs, the platform integrates Google AdSense to show non-intrusive contextual ads. European and California users can manage marketing cookies via the Cookie Consent banner.
Optional Private Workspace (Cloud Storage & Sharing): Only when you explicitly use the Workspace feature to save backups or share links, files are encrypted and transferred to isolated private cloud storage. Instant permanent physical file shredding is available at your discretion.
Cloud AI Vision Recognition (Optional Opt-In): Only when you deliberately switch the OCR engine to "AI Vision", image slices are transmitted over TLS 1.3 encrypted channels to Google Gemini API for real-time ephemeral inference. Customer data is never retained or used to train public foundation models.
Basic Preferences & Security Logs: Stores UI language and theme settings locally. Ephemeral server access logs are retained for 30 days strictly for security audit and DDoS defense.
3. How We Use Information
To deliver local document conversion, media metadata (EXIF/GPS coordinates/recording device serials/ID3 tags) scrubbing, diagramming, and document reading.
To verify daily credits and VIP subscription access, defending against automated quota abuse.
To monitor server health and performance, ensuring reliable uptime and user experience.
To serve context-relevant advertisements via Google AdSense (subject to user cookie consent preferences).
4. Local-First Engine & Media Privacy Guarantee
We uphold industry-leading client-side isolation for documents, photographs, and media files:
Local Offline Engine: All document format transformations, offline OCR, photo EXIF removal, video metadata stripping, and audio tag erasure execute 100% in your local browser sandbox. Original media files never leave your device.
Multimedia Metadata Scrubbing Guarantee: Media files frequently contain high-precision GPS coordinates, recording timestamps, and device serial numbers. Our tools inspect and sanitize this metadata entirely in local memory; our servers never collect or mirror media files.
Optional Cloud AI Mode: When you explicitly choose cloud AI features, data is transmitted via TLS 1.3 to official enterprise APIs under ephemeral zero-retention commercial terms, never training public foundation models.
5. Third-Party Services
Third-party services integrated into DocMorph Studio operate under their respective privacy policies:
Google Generative AI (Gemini API): Provides multimodal vision and extraction under enterprise data protection terms.
Google AdSense: Delivers contextual advertisements. Please refer to Google's Privacy Policy at https://policies.google.com/privacy.
Encryption in Transit: Sitewide HTTPS enforcement with TLS 1.3 protocol encryption.
Retention Window: Server access logs are automatically rotated and purged after 30 days. Local tools generate no server-side files; workspace documents can be permanently shredded on demand.
Your Legal Rights (GDPR & CCPA): You have the right to access, rectify, or delete personal data, clear cookies, and exercise your right to be forgotten.
7. Children's Privacy
DocMorph Studio is not directed to children under 14 years of age. We do not knowingly collect personal information from minors.
8. Policy Updates and Contact Information
We may update this Privacy Policy periodically. Major changes will be highlighted on our homepage. For inquiries or to exercise your privacy rights, please reach us at:
Official Support Email: [email protected] (we respond within 7 business days)
FAQ
Are my documents uploaded to servers or used to train AI models?
Never. Core conversion, OCR, and media scrubbing tools execute inside your browser's WebAssembly sandbox. When optional cloud AI is enabled, Google Gemini enterprise API terms strictly prohibit model training on customer data.
What does the dm_uid cookie record and how can I remove it?
dm_uid is a random cryptographic token used exclusively to prevent quota abuse and rate limiting. It contains no personal or hardware identifiers. You can regenerate it via the credits modal or clear cookies in your browser.
How are GDPR and CCPA privacy rights respected?
We offer cookie consent controls, automatic 30-day log purging, instant data deletion for optional workspace files, and a dedicated privacy inquiry channel at [email protected].