Skip to main content

Privacy Policy

In order to ensure transparency and give you more control over your personal information, this privacy policy (“Privacy Policy”) governs how we, Docflo Ltd. (“DOCFLO”, “us”, “we”, "Company" or “our”) use, collect and store personal information that we collect or receive from or about the subscribers to our Services (“you”) in connection with https://docflo.ai/ (the "Website") and the services provided therein (the “Services”):

We greatly respect your privacy, which is why we make reasonable efforts to provide a platform that would meet applicable privacy standards. Please read this Privacy Policy carefully, so you can fully understand our practices in relation to personal data. Important note: Nothing in this Privacy Policy is intended to limit in any way your statutory rights, including your rights to a remedy or other means of enforcement.

This Privacy Policy can be updated by us from time to time and, therefore, we ask you to check back periodically for the latest version of this Privacy Policy. If we implement material changes in the way we use your information, in a manner that is different from that stated at the time of collection, we will notify you by posting a notice on our Website or by other means and take any additional steps as required by applicable law.

Please note that that this Privacy Policy, together with the Terms of Service ("Terms of Service") constitute the Agreement between you and the Company related to the use of the Services and the Website. Terms used in this Privacy Policy shall have the meaning attached to them under the Terms of Service unless otherwise specifically defined otherwise under this policy.

1. What personal information we may collect​

1.1 Information provided through the Services.​

We collect personal information that you voluntarily provide, such as your full name, email address, password, financial information, as well as any other information that you decide to provide us by uploading documents. We also collect the contact and billing information of our customers.

1.2 Information provided through the Website.​

When you use the Website, we collect and process full name, email address, when you interact with the Website, for example, when you send us a request for a demo or contact us (including, the chat).

1.3 Information automatically collected.​

We may automatically collect certain information through your use of DOCFLO's Services and Website, such as cookie, pixels, tracking technologies and similar identifiers (“Technologies”), your Internet protocol (IP) address, and other device identifiers that are automatically assigned to your device, browser type and language, geo-location information, hardware type, operating system, internet service provider and other information about actions taken through the use of DOCFLO's Services and Website.

1.4 Information from Other Sources.​

DOCFLO may also obtain information about you from other sources, including publicly - or commercially- available information, and through third-party data platforms, partners and service providers.

  • Documents and data uploaded by users remain the exclusive property of the user or the entity the user represents.
  • Docflo does not claim ownership of any content processed through our Services. Users grant Docflo a limited license to use, store, and process documents solely for providing and improving the Services.

2. The purposes for which we collect and use your personal information.​

2.1 We use your personal information for some or all of the following purposes:​

2.1.1 To provide you with the Services.​

DOCFLO will use your information to provide the Services, including: (i) to allow you to register and log-in to the Services; (ii) to allow you to make use of the Services; (iii) to allow you to create your admin user and to generate regular users and administer their privileges, (iv) we will use your personal information in order to authenticate you and allow you to access the Services; (v) to communicate with you, provide you with support and maintenance; and (vi) to personalize your experience with the Services.

2.1.2 For Administrative Purposes.​

DOCFLO may use your information (i) to respond to your questions, comments, and other requests for support, or information; (ii) to provide you with the Services; (iii) for internal quality control purposes; (iv) to establish a business relationship; (v) for testing, research, analysis, and product development, including to develop and improve our Services, and in connection with providing and maintaining our Services; and (vi) to generally administer the Services.

2.1.3 To Market DOCFLO and our Website and Services.​

DOCFLO may use information to market DOCFLO, its Website and Services. Such use includes (i) notifying you about offers and services that may be of interest to you that we offer and/or that we offer jointly with or on behalf of other organizations; (ii) tailoring content, advertisements, and offers for you, including, targeting and re-targeting practices; (iii) conducting market research; (iv) developing and marketing new products and services, and to measure interest in DOCFLO’s Website and Services; and (v) other purposes disclosed at the time you provide personal information.

2.1.4 To allow you to make use of our Website.​

We will use your information to allow you to make use of our Website, including, (i) if you request a demo, we will use your personal information to process and answer your request for a demo; (ii) to allow you to register and log-in to the DOCFLO Academy; (iii) to answer your questions and to allow you to communicate with us (e.g., by using the Website chat); (iv) to analyze your use of our Website and to improve our Website; and (v) to customize your experience.

2.1.5 Security purposes.​

Some of the abovementioned information will be used for detecting, and taking steps to prevent and prosecute fraud or other illegal activity; to identify and repair errors; to conduct audits and for security purposes. Information may also be used to comply with applicable laws, with investigations performed by the relevant authorities, for law enforcement purposes, and/or to exercise or defend legal claims.

2.1.6 De-identified and Aggregated Information Use.​

In certain cases, we may or will anonymize or de-identify your Information and further use it for internal and external purposes, including, without limitation, to improve the services and for research purposes. We use this anonymous or de-identified information and/or disclose it to third parties without restrictions (for example, in order to improve our services and enhance your experience with them).

2.1.7 Cookies and Similar Technologies.​

We, as well as third parties that provide content, advertising, or other functionality on the Website and Services, may use Technologies to automatically collect information through the Website and Services. We use Technologies that are essentially small data files placed on your device that allow us to record certain pieces of information whenever you visit or interact with the Website and Services. If you would like to opt out of the Technologies we employ on the Website and/or Services, you may do so by blocking, deleting, or disabling them as your browser or device permits. For more information, see our cookie notice.

2.2 The lawful bases we rely on for processing personal information are (if and when applicable):​

2.2.1 You had given us consent to the processing of your personal data; and / or​

2.2.2 Processing is necessary for the performance of the Services;​

3. Disclosure of personal information to third parties​

We do not disclose or share your personal information with third parties except to provide you the Website and/or Services you have requested, or under the following circumstances:

3.1 We may share platform usage information with technology partners.

3.2 We use third-party service providers to process your information for the purposes outlined above, including, without limitation:

  • With cloud service providers for hosting purposes;
  • With websites and web content creation platforms in order to help us manage our Website and Services;
  • With email providers, marketing, CRM and other similar tool providers;
  • Identity providers, in order to securely manage user accounts, and implement access control;
  • Log-processing services in order to store and process logs to improve the product, detect and fix problems, and provide you with support;
  • The chat option on our Website; and
  • With analytic companies, in order to help us understand and analyze the information we collect in the context of the Website and the Services.

3.3 To the extent necessary, with regulators, courts, banks, or competent authorities, to comply with applicable laws, regulations, and rules (including, without limitation, federal, state, or local laws), and requests of law enforcement, regulatory and other governmental agencies or if required to do so by court order, as well as for internal compliance procedures and to protect the safety, security, and integrity of DOCFLO, our Services, customers, employees, property, and the public.

3.4 If, in the future, we sell or transfer, or we consider selling or transferring, some or all of our business, shares, or assets to a third party, we will disclose your information to such third party (whether actual or potential) in connection with the foregoing events (including, without limitation, our current or potential investors). In the event that we are acquired by, or merged with, a third party entity, or in the event of bankruptcy or a comparable event, we reserve the right to transfer, disclose or assign your information in connection with the foregoing events.

3.5 Where you have otherwise provided your consent to us for sharing or transferring your information.

4. Our use of cookies and other activity tracking technologies​

4.1 Cookies​

We, as well as third parties that provide content, advertising, or other functionality on the Website and the Services use Technologies to automatically collect information through the Website and the Services. We use Technologies that are essentially small data files placed on your device that allow us to record certain pieces of information whenever you visit or interact with the Website and/or the Services. If you would like to opt out of the Technologies we employ on the Website and/or Services, you may do so by blocking, deleting, or disabling them as your browser or device permits. For more information, please consult our cookies policy

4.2 Analytic tools​

4.2.1 Google Analytics​

The Website uses a tool called “Google Analytics” to collect information about the use of the Website. Google Analytics collects information such as how often users visit this Website, what pages they visit when they do so, and what other websites they used prior to coming to this Website. We use the information we get from Google Analytics to maintain and improve the Website and our products. We do not combine the information collected through the use of Google Analytics with the personal information we collect. Google’s ability to use and share information collected by Google Analytics about your visits to this Website is restricted by the Google Analytics Terms of Service, and the Google Privacy Policy. You may learn more about how Google collects and processes data specifically in connection with Google Analytics. You may prevent your data from being used by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on.

4.2.2 Others​

We reserve the right to remove or add new analytic tools.

5. Confidentiality, security, and data retention​

5.1 Security​

We have implemented appropriate technical, organizational, and security measures designed to protect your personal information. However, please note that we cannot guarantee that the information will not be compromised as a result of unauthorized penetration of our servers. As the security of information depends in part on the security of the computer, device, or network you use to communicate with us and the security you use to protect your user IDs and passwords, please make sure to take appropriate measures to protect this information.

5.2 Retention of your personal information​

We may retain your information (including personal information) for any lawfully permitted period of time, and as necessary to comply with our legal and contractual obligations, enforce our agreements, and enable us to investigate events and resolve disputes. In addition, please note that in some circumstances we may store your personal information for longer periods of time, for example (i) where we are required to do so in accordance with legal, regulatory, tax, or accounting requirements, or (ii) for us to have an accurate record of your dealings with us in the event of any complaints or challenges, (iii) if we reasonably believe there is a prospect of litigation relating to your personal information or dealings or (iv) backup, archival, and/or audit purposes. Regarding retention of cookies, you can read more in our cookie policy.

6. Cross-border personal information transfers​

6.1. We store and process personal information with GCP with servers located in United States and or/ in European Union.

6.2. To the maximum extent permitted by law, as part of the storage of the personal information mentioned in this Privacy Policy we transfer it across borders around the world. To the extent necessary under privacy laws and regulations, we will implement data onward transfer instruments such as data processing and protection agreements or ensure such jurisdiction imposes adequate data protection regulations.

6.3. We may share your personal information within DOCFLO and transfer it to countries in the world where we do business, including the United States. Therefore, your personal information may be processed in countries with privacy laws that are different from privacy laws in your country. Regardless of location, we handle personal information as described here, and we take care to ensure that our employees, agents, and strategic partners in other countries act in a manner consistent with this Privacy Policy.

7. Your privacy rights. How to delete your account​

7.1. The following rights (which may be subject to certain exemptions or derogations) shall apply to certain individuals (some of which only apply to individuals protected by specific laws):

  • You have the right to withdraw consent to the processing, where consent is the basis of processing.
  • You have the right to access the personal information that we hold and request further details about how we process it, under certain conditions.
  • You have the right to demand rectification of inaccurate personal information about you. We will promptly correct any information found to be incorrect.
  • You have the right to object to unlawful data processing under certain conditions.
  • You have the right to the erasure of past data about you (your “right to be forgotten”) under certain conditions.
  • You have the right to demand that we restrict the processing of your personal information, under certain conditions, if you believe we have exceeded the legitimate basis for processing, the processing is no longer necessary, or if you believe your personal information is inaccurate.
  • You have the right to data portability of personal information concerning you that you provided us in a structured, commonly used, and machine-readable format, subject to certain conditions.
  • The personal information we collect is not used for automated decision-making and profiling, except for automated processes in the context of marketing. As stated above, you can opt out of direct marketing by DOCFLO by contacting DOCFLO directly or by following the instructions through the unsubscribe options in our email messages.

7.2. You can exercise your rights by contacting us at hello@docflo.ai. You may use an authorized agent to submit a request on your behalf if you provide the authorized agent written permission signed by you. To protect your privacy, we may take steps to verify your identity before fulfilling your request. Subject to legal and other permissible considerations, we will make every reasonable effort to honor your request promptly in accordance with applicable law or inform you if we require further information in order to fulfil your request. When processing your request, we may ask you for additional information to confirm or verify your identity and for security purposes, before processing and/or honoring your request. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. In the event that your request would adversely affect the rights and freedoms of others (for example, would impact the duty of confidentiality we owe to others) or if we are legally entitled to deal with your request in a different way than initial requested, we will address your request to the maximum extent possible, all in accordance with applicable law.

7.3. Marketing emails – opt-out: You may choose not to receive marketing email of this type by sending a single email with the subject "BLOCK" to hello@docflo.ai. Please note that the email must come from the email account you wish to block OR if you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails, and we will process your request within a reasonable time after receipt.

Our Website and Services are not intended for people under the age of consent. If we become aware that we have inadvertently received or collected personal information pertaining to a person under the age of consent without valid consent, we will remove such information from our records. If you believe that a person under the age of consent has provided us with personally identifiable information without the consent of his or her parent or guardian, please contact us at hello@docflo.ai

9. Interaction with Third Party Products.​

We enable you to interact with third party websites, mobile software applications and products or services that are not owned, or controlled, by us (each, a “Third Party Service”). We are not responsible for the privacy practices or the content of such Third Party Services. Please be aware that Third Party Services can collect information from you. Accordingly, we encourage you to read the terms and conditions and privacy policies of each Third Party Service.

10. Security Measures.​

We follow generally accepted industry standards, including the use of appropriate administrative, physical and technical safeguards, to protect your personal information, such as multiple factor authentication, penetration tests and ISO 27001. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security or confidentiality.

11. Prohibition of Unauthorized Security Testing.​

You expressly agree that any form of security testing, including but not limited to penetration testing, vulnerability assessments, load or stress testing, port scanning, traffic manipulation, or other techniques intended to probe, scan, or compromise the availability, confidentiality, integrity, or performance of any component of the Service, is strictly prohibited without the prior written authorization of the Company. Any such activity conducted without express, written consent of the Company shall be considered a material breach of the Agreement and may constitute an unauthorized access attempt in violation of applicable data protection, cybersecurity, and criminal laws, including but not limited to the Israeli Computer Law, 1995 and shall entitle the Company to (a) Immediately suspend or terminate access to the Service without notice (b) Report such activities to the Israel Police, Israel National Cyber Directorate (INCD), or other competent authorities, and Pursue civil and/or criminal remedies, including but not limited to damages, injunctive relief, and reimbursement of costs related to investigation and remediation. Should you require a security review for compliance purposes, such activities must be coordinated in advance through a mutually executed security testing authorization agreement.

12. Contact us.​

If you have any questions, concerns or complaints regarding our compliance with this notice and the data protection laws, or if you wish to exercise your rights, we encourage you to first contact us at hello@docflo.ai

Last Updated: May 26, 2025