# Doana privacy policy

Summary of the full policy at [https://doana.ca/en/privacy-policy](https://doana.ca/en/privacy-policy) (HTML). Privacy contact: privacy@doana.ai.

## Personal data collected

- Account: name, email address, company name, payment information.
- Documents: the content of the customs or aviation documents you submit for extraction.
- Usage: access times, features used, IP address, browser and device information.

## Purposes

Providing the Service (document processing, data extraction, exports), account communication and support, and aggregated, anonymized usage statistics to improve the Service. Document content and extraction results are never used to train or improve AI models.

## Recipients

Service providers under confidentiality obligations: cloud hosting, payment processing, analytics. Documents sent through an AI assistant (ChatGPT, Claude, or another MCP client) are stored in a Google Cloud Storage bucket controlled by Doana and read by Google Cloud Vertex AI (Gemini) as a processor on Doana's instructions. The AI assistant receives the extracted fields inside your conversation under its own privacy policy. We do not sell personal data.

## Retention

- Account data: for the life of the account; deleted or anonymized within 30 days of a deletion request.
- Documents sent through an AI assistant: original file up to 7 days, structured extraction result up to 90 days, then deleted.

## Your controls

Delete any extraction at any time from the Agentic connector page of the Doana dashboard (file, result, and job record). GDPR rights of access, correction, deletion, export, objection and restriction via privacy@doana.ai, answered within 30 days.