Privacy Policy

Last updated: September 20, 2026

This Privacy Policy describes how Tucats LLC ("we", "us") collects, uses, and shares information in connection with Docket Cloud (the "Service").

1. Information We Collect

• Account information: your email address, verified sign-in identity, sessions, and marketing preferences. For legacy API keys we store a one-way cryptographic hash of the key -- we never store your raw API key after it's shown to you once at creation.
• Workspace content: whatever you or an AI assistant/coding tool you've connected chooses to store -- task titles and notes, documents, checklist items, and session-state key/value entries. This may include business or technical information you or your team put there; we don't inspect it beyond what's needed to operate the Service (e.g. full-text search indexing).
• Billing information: handled directly by our payment processor, Stripe. We receive your name, email, and subscription/transaction status from them -- we do not receive or store your full payment card or bank account number.
• Operational logs: standard server request logs (timestamps, request paths, response status, source IP) used for security, debugging, and abuse prevention.

2. AI Assistant Access Is a Core, Deliberate Feature

Docket Cloud is designed to be read and written by AI coding agents and assistants (for example Claude Code, Cursor, Windsurf, or others) that you choose to connect to your workspace using an authorized connection, normally OAuth after email verification (legacy API keys may remain available during migration). Each assistant is restricted to the permissions and scopes granted to its connection -- that's the product's purpose, not a data-sharing arrangement we control. We don't share your workspace content with any AI provider ourselves, and we don't use it to train models.

3. How We Use Information

To provide and operate the Service, process payments and manage subscriptions, respond to support requests, secure the Service against abuse, and comply with legal obligations. We do not sell your information. With your optional consent, Tucats may email you news and offers about Docket Cloud, other Tucats products, and selected partner offers. Tucats sends these messages; we do not share your email address with partners for their independent marketing. Marketing consent is not required for a Free account. You can change your preference in your workspace or unsubscribe using a marketing email’s link. This does not stop necessary sign-in, security, billing, or service messages. We retain consent and withdrawal records and the minimum suppression information needed to respect your choice.

4. Third-Party Service Providers

We rely on the following providers to operate Docket Cloud, each of which processes a limited slice of your information as described:

• Amazon Web Services (AWS): hosts our website, application, authentication, email delivery, and operational logs. Our application infrastructure is in US East (Northern Virginia).
• Turso: hosts your isolated workspace database and our control-plane records.
• Stripe: processes subscription payments. Their use of your information is governed by their own privacy policy.

5. Data Location

Our service is operated using infrastructure in the United States. Contact us for information about the locations applicable to your workspace.

6. Data Retention

On the current Free/Team/Business platform, we retain your workspace data while your account exists, including on Free and during payment recovery. Canceling a paid subscription alone does not schedule deletion. Explicit account deletion is separate: data is retained for a 3-day recovery window after the deletion request, then permanently deleted. Contact support@tucats.us to request deletion or assistance during that window. Legacy accounts that have not migrated remain subject to their previously communicated retention terms.

7. Security

Each workspace is isolated in its own database. API keys are stored only as one-way hashes. Traffic to and from the Service is encrypted in transit (HTTPS/TLS). No method of storage or transmission is perfectly secure, and we can't guarantee absolute security.

8. Your Rights

You can access, correct, or request deletion of your information at any time by contacting support@tucats.us. Depending on where you live, you may have additional rights under applicable law (for example, GDPR or CCPA); contact us to exercise them.

9. Children

Docket Cloud is not directed at, and we do not knowingly collect information from, anyone under 16 years old.

10. Changes to This Policy

We may update this Privacy Policy from time to time; the "Last updated" date above reflects the most recent revision.

11. Contact

Questions about this policy or your data: support@tucats.us.