Privacy Policy

Who we are

PrimeDoc ("we", "us") runs PrimeDoc and this website and decides how the personal data described here is used. This policy covers the service and the site. Content a workspace keeps in PrimeDoc is controlled by that workspace; we process it on the workspace's behalf.

What we collect

Your account

• Your name and email address, and whether you have confirmed the address.
• Your password, kept only as a one-way hash; we never see or store the password itself.
• For each signed-in device: when it signed in, its IP address and its browser, so you can see and sign out your devices in Account settings.

What you and your team create

• Workspaces, projects, folders and pages; comments, mentions and reviews; diagrams, schemas, API contracts, collections and environments; files and images you upload; the results of runs, with each response as it came back.
• Who has access to what, and the email addresses of people you invite.
• Tokens for AI agents and runners, kept only as hashes, and the addresses of mock servers.

Technical records

• Server logs of requests (time, address, path and result) for security and fixing problems, kept for a short time.
• A sign-in cookie, and your preferences (theme, sidebar width, recent pages, the workspace you chose) in your browser's own storage.

What we do not collect

• Secret values in environments are typed for a run and kept by your browser for that session; they are not stored on our servers.
• We use no advertising, no third-party analytics and no tracking cookies.
• We do not sell personal data, and we do not use your content to train AI models.

How we use it

• To run the service you signed up for: store your work and show it to the people you share it with.
• To keep it secure: sign-in, devices, preventing abuse and investigating problems.
• To send email the service needs: confirming your address, resetting your password, invitations, and notices about your account or changes to PrimeDoc.
• To answer you when you write to us.

We rely on our agreement with you to run the service, on your consent where we ask for it, and on our legitimate interest in keeping PrimeDoc secure and working.

Who sees it

• The people you share with. Members of a workspace, project or folder, and guests on a page, see what their access allows. Your name and email are shown to people you work with.
• Anyone with a public link sees the read-only copy of the page it was made for, until it is revoked.
• Anyone with a page's link sees its title and project in a chat app's preview, if the workspace's owners or admins turned that on; never what the page says.
• Service providers that host the service and deliver its email, under contracts that let them use the data only to provide that service to us.
• Authorities, when the law requires it, and a buyer of the service if it changes hands, under the same promises as this policy.

AI agents you connect

When you connect an AI agent to a project, it reads what your token allows and sends that content to the agent's provider. That provider's own terms and privacy policy apply to it. You can revoke an agent's token at any time.

Where it is kept

Your data is stored on servers run by our hosting provider, which may be outside the country you live in. Write to us if you need to know the region your workspace is kept in.

How long we keep it

• Your account and your work, for as long as your account or workspace exists.
• A deleted page can be brought back for 30 days.
• When you delete your account or a workspace ends, we delete its data within a reasonable time. Backups are replaced on a rolling basis, and logs are kept for a short time.
• Records we must keep by law are kept for as long as the law requires.

How we protect it

• Every connection to PrimeDoc is encrypted (HTTPS).
• Each workspace is kept apart in the database itself, not only in the app.
• Passwords, share links and the tokens of agents and runners are stored as hashes, never as they were given.
• Access to the servers is limited to the people who run the service.

No system is perfectly secure. If something goes wrong that affects your data, we tell you.

Your rights

You can ask us to tell you what personal data we hold about you, to correct it, to delete it, or to give you a copy. You can export your pages yourself at any time, withdraw a consent you gave, and, where the law gives you the right, nominate someone to act for you. Write to us and we answer within 30 days.

Children

PrimeDoc is not meant for anyone under 18, and we do not knowingly collect their data.

Changes to this policy

We tell you by email or in the app before a change that matters applies. The date at the top shows when this policy last changed.

Contact and grievances

For any question or complaint about your personal data, write tohello@rainlily.dev. We acknowledge your message and answer within 30 days.