Privacy Policy
Compliance Standard: GDPR, CCPA, SOC 2 Framework • Last Updated: October 2026 • Domain: docscorm.com
1. Executive Privacy Commitment
At DocScorm (operating at https://docscorm.com), we understand that your uploaded documents contain sensitive operational blueprints, employee manuals, compliance policies, and proprietary intellectual property. We implement defense-in-depth architectural safeguards to protect your assets.
2. Multi-Tenant Row-Level Security (RLS) Architecture
All customer conversion metadata, generated assessment questions, and profile records stored in our Enterprise Cloud Vault are locked behind strict Row-Level Security (RLS). Anonymous and public access to all tables is explicitly revoked at the database engine level.
Every database read, write, update, and delete query requires cryptographic authentication validated against auth.uid() = user_id. Tenants cannot access or inspect any other customer's data. In addition, our ephemeral zero-storage architecture ensures the permanent SCORM .zip is transmitted straight to your email without persistent cloud storage retention.
3. Information We Collect
- Account Information: Name, work email address, and authentication credentials provided during registration.
- Uploaded Document Buffers: PDF files and text streams provided exclusively for the purpose of executing the requested SCORM compilation job.
- Payment & Billing Telemetry: Transaction identifiers and subscription tier status provided by our Merchant of Record (Paddle / Lemon Squeezy). We do not store raw credit card numbers on our servers.
4. Artificial Intelligence Processing Safeguards
Document translations, chapter chunking, and dilemma quiz generation are performed via the Google Gemini 1.5 multimodal enterprise API. Under our enterprise API configuration, customer inputs are ephemeral and are NOT utilized to train or retrain foundational AI models.
5. Data Retention & Right to Deletion
Customers may permanently delete their conversion records, uploaded artifacts, and user accounts at any time through the dashboard or by contacting privacy@docscorm.com. Deletion requests cascade permanently across all PostgreSQL tables within 24 hours.