Privacy policy

Information DocDuck handles

Documents saved on your device

The main workspace saves Word files in this browser on your device. It stores the document bytes, readable text used for on-device search, document name and filename, and basic creation, update, and revision information. This device library does not upload documents to the DocDuck cloud library unless you choose a cloud-save action. Browser storage is not a backup; clearing site data or losing access to the browser profile can make those files unavailable.

Cloud Documents

If you sign in and use Cloud Documents, DocDuck handles your account identifier and email address, Word files you save there, document names and filenames, revision and update information, word counts, and the current document's readable text for the cloud-library search feature. Cloud files and records are stored in DocDuck's private Supabase project. Up to ten earlier document versions are retained in the library. Signing in does not upload documents from your device library. A device document is transferred only after you choose to save a copy to cloud and confirm the upload.

Google sign-in and Google Drive

When you choose Continue with Google, Google sends basic identity information, such as your account identifier, email address, name, and profile image, so Supabase can authenticate your DocDuck account. Supabase Auth handles the Google sign-in and stores provider account metadata with your DocDuck account. DocDuck uses your account identifier to associate your cloud library with your account and your email address to show which account is signed in. The DocDuck sign-in flow requests the openid, email, and profile scopes. Google Drive access is separate from Google sign-in.

If Google Drive import is available and you choose Open from Google Drive, DocDuck requests the drive.file permission and opens Google's file picker. The browser uses that permission to download only the Word document or Google Doc you select. DocDuck imports a separate Word copy into your cloud library; it does not edit the original file or sync changes back to Drive. The access token is used in the browser for the import and is not sent to DocDuck's database.

If OneDrive import is available and you choose to connect it, Microsoft grants DocDuck the delegated Files.Read permission. It can read files in the signed-in user's OneDrive; for personal Microsoft accounts, this also includes files shared with that account. DocDuck uses the permission to list folders you browse and download only the Word file you select for import. The access token stays in browser memory for the import and is not sent to DocDuck's servers. DocDuck imports a separate Word copy and does not modify the OneDrive original or sync changes back. This permission is broader than access to the selected file alone.

DocDuck does not sell Google user data, use it for advertising, or use it to train or improve general-purpose AI or machine-learning models. Google identity data is used for sign-in and account association. Selected Drive-file data is used only to provide the import you request and the resulting DocDuck document.

Embedded editing

When another website embeds the editor, that website provides the Word file to the editor and receives edited Word bytes when it requests an export. The embedded editing session uses memory in your browser and does not save document contents to DocDuck's cloud library. The website that embeds the editor controls its own storage, identity, and retention practices.

Optional AI Review

If you choose an AI Review action for a cloud document, DocDuck sends that document's extracted text and, when you ask a question, your question to Vercel AI Gateway. The request is routed to OpenAI for analysis. AI Review is optional, is available only for signed-in Cloud Documents, and does not automatically change your file. DocDuck does not add the request or result to your document or version history. Vercel and OpenAI may process request data under their own terms and privacy practices.

Support and technical information

Vercel hosts the website and may process request and diagnostic information needed to deliver and secure the service. Supabase provides account authentication, database, and file storage for Cloud Documents. The configured email delivery provider processes email sign-in requests. Those providers may keep their own service logs and backups under their terms and settings.

The Contact us form prepares a message in your email application. DocDuck receives it only if you choose to send it.

How information is used and shared

DocDuck uses information to provide document editing, save and retrieve cloud documents, search document content when you ask to search, authenticate your account, carry out imports you request, respond to support requests, and protect the service from errors and abuse.

DocDuck shares information with service providers only as needed to run the features you use, such as hosting, authentication, database and file storage, and email delivery. DocDuck does not sell your document contents or Google user data. A website that embeds the editor receives the document bytes that it supplied and the edited bytes when it requests an export.

Retention and your choices

Device documents remain in your browser until you delete them or browser storage removes them. Cloud documents remain in your library until you delete them or request account deletion. You can download documents and create a separate library backup. A backup already downloaded to your device is outside DocDuck's control. To request account deletion, contact support@docduck.io. Account deletion removes the DocDuck account and its cloud document records and files when cleanup completes. Service-provider backups, security logs, and email delivery records may follow separate provider retention schedules.

You can sign out of DocDuck or revoke DocDuck's Google account access in your Google Account security settings. Revoking Google access does not delete an existing DocDuck account or its cloud documents; request deletion separately.

For a practical guide to device storage, cloud documents, backups, and embedded editing, see Your data.

Changes and contact

DocDuck may update this policy when the service or its data practices change. The date at the top shows when this page was last updated. For privacy questions or requests about your information, contact support@docduck.io.