Privacy Policy

1. Introduction

JB Technology LLC (“we,” “us,” or “our”) operates Dockett, an invoice processing service available at dockett.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect the following categories of information:

• Account information: Email address and name, provided when you create an account.
• Phone number (optional): If you enable SMS/MMS invoice ingestion, we collect and verify your mobile phone number so you can text invoices to Dockett.
• Invoice and document data: Documents you upload or send (PDF, JPG, PNG), including by email forwarding and SMS/MMS, the AI-extracted structured data (vendor name, amounts, dates, line items), and your correction history (original vs. corrected values, used to improve extraction accuracy).
• Forwarded email metadata: If you forward invoices to your Dockett ingestion address, we receive the sender email address, subject, and attachments in order to process them.
• Accounting connection: QuickBooks Online or Xero OAuth tokens, encrypted at rest using AES-256-GCM encryption.
• Billing information: Payment processing is handled by Stripe. We do not store your credit card numbers.
• Usage data: Page views and feature usage, collected via PostHog product analytics.

3. How We Use Your Information

• Receive and process invoices you send by upload, email forwarding, or SMS/MMS
• Process and extract invoice data using AI
• Sync approved invoices to your connected QuickBooks Online or Xero account
• Manage your subscription and billing
• Improve extraction accuracy over time using your correction history
• Send transactional emails and SMS (account confirmations, password resets, billing receipts, and invoice-received confirmations)

4. Third-Party Services

We use the following third-party services (sub-processors) to operate Dockett:

• Supabase: Database, file storage, and authentication.
• Anthropic (Claude): AI invoice extraction. Invoice content is sent for processing only and is not used to train AI models, per Anthropic’s API data usage policy.
• Intuit (QuickBooks Online): Accounting sync for bill creation and document attachment.
• Xero: Accounting sync for bill and bank-transaction creation and document attachment.
• Stripe: Subscription billing and payment processing.
• Twilio: SMS/MMS invoice ingestion and verification-code delivery.
• Resend: Transactional email delivery and inbound email-forwarding ingestion.
• PostHog: Product analytics (feature usage and funnels) used to improve the service.
• Vercel: Application hosting.
• Sentry: Error monitoring. No invoice content is sent, only error metadata.

We will update this list and notify you of material changes to our sub-processors.

5. Data Storage & Security

• Data is stored in Supabase (cloud-hosted PostgreSQL and object storage).
• OAuth tokens are encrypted at rest using AES-256-GCM encryption.
• Row Level Security is enforced on all database tables.
• All traffic is transmitted over HTTPS.

6. Data Processing Location

Dockett is operated from the United States. Your data is processed and stored in the United States via our cloud infrastructure providers. If you access Dockett from outside the United States, you understand that your data will be transferred to and processed in the United States.

7. Data Retention

• Invoice data is retained while your account is active.
• On account deletion request, all invoices, extracted data, and connection tokens are deleted.
• Billing records are retained as required by applicable law.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate extracted data
• Request deletion of your account and all associated data
• Disconnect third-party integrations at any time via Settings

To exercise any of these rights, contact us at support@dockett.app.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• We do not sell your personal information.
• You may request disclosure of the categories and specific pieces of personal information we have collected.
• You may request deletion of your personal information.

To exercise these rights, contact us at support@dockett.app.

10. International Users (GDPR & UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or another region with data protection laws, you have additional rights, including the rights to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. Our legal basis for processing is the performance of our contract with you and our legitimate interest in operating and improving the service. As described in Section 6, your data is processed and stored in the United States. To exercise these rights, contact us at support@dockett.app.

11. Children’s Privacy

Dockett is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

12. Cookies & Analytics

Dockett uses authentication session cookies, which are required to keep you signed in. We also use PostHog for product analytics to understand how features are used and to improve the service; PostHog may set cookies or use local storage to measure usage. We do not use cookies for advertising, and we do not sell data collected through analytics. You can block non-essential cookies through your browser settings, though doing so may affect functionality.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by sending an email to the address associated with your account. Your continued use of Dockett after such changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy, contact us at support@dockett.app.

JB Technology LLC
dockett.app