Privacy Policy

This Privacy Policy describes how OmitDoc (“OmitDoc,” “we,” “us”) collects, uses, and shares information in connection with https://omitdoc.com and related services (the “Service”). It is written to meet common U.S. notice standards, including the categories and rights described in the California Consumer Privacy Act as amended by the CPRA (“CCPA”), and to be honest about a product whose documents never leave your device.

Contact for privacy requests: email contactomitdoc@gmail.com.

Notice at collection

At or before we collect personal information, here is what you should know:

• Documents you open in the tool are not collected by us. They stay in your browser. We do not upload, store, scan on our servers, or use them to train an AI model.
• We collect account, payment, and website-log information so you can sign in, use your free download, pay for a plan, and so the site can run.
• We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use advertising pixels.
• We do not collect Social Security numbers, bank numbers, or other document contents from the file itself. Those values, if they appear in a file you open, never reach our servers.

Your document stays on this device

When you open a PDF, Word file, spreadsheet, text file, or image, the bytes are read in this browser tab. Find, search, drawing boxes, and building the secured PDF all run locally. The download is a file created on your device. Closing the tab discards the open file from OmitDoc. We cannot retrieve a document later because we never received it.

That design is a product choice, not a claim that no information ever leaves your device. Account and payment do leave, as described below.

What does leave your device

Personal information we collect

In the preceding 12 months we have collected, or we may collect, the following categories of personal information (using CCPA category names). We do not collect every example in a category — only what is needed to run the Service.

We do not collect, from the Service:

• The contents of your documents (SSN, bank account, name on a paystub, and similar)
• Protected health information as a HIPAA business associate — we are not your BA
• Sensitive personal information as that term is used in the CCPA (for example SSN, account log-in plus password that we store ourselves, precise geolocation, or government id numbers), except that Clerk may process credentials you type into Clerk’s forms so you can sign in
• Information from children under 13

Sources

• You, when you create an account, check out, or email us
• Clerk, which operates sign-in and stores account records
• Stripe, which operates checkout and billing
• Automatic collection by the website host when you load a page

Business purposes

• Provide the Service, including sign-in, the free download, and paid unlocks
• Process payments, prevent fraud, and keep tax and accounting records
• Secure the site, debug, and prevent abuse
• Respond to you and to legal process
• Enforce our Terms of Use

We do not use personal information for cross-context behavioral advertising.

Service providers (what we disclose)

We disclose personal information for a business purpose to companies that process it on our instructions. In the preceding 12 months that has included:

• Clerk — accounts, sessions, and whether you used the free download
• Stripe — checkout, cards, invoices, subscriptions, customer portal
• Vercel — hosts the application. Vercel may log that a page was requested. It does not receive the contents of files you open in the tool

Each of those companies has its own privacy policy. We do not allow them to use OmitDoc account data to advertise unrelated products on our behalf.

We do not sell or share

We do not sell personal information for money. We do not share personal information as “share” is defined in the CCPA (disclosure for cross-context behavioral advertising). We have no actual knowledge of selling or sharing personal information of consumers under 16. Because we do not sell or share, this site does not display a “Do Not Sell or Share My Personal Information” link. If that ever changes, we will add the link and update this policy first.

We also do not use or disclose sensitive personal information for purposes that would require a “Limit the Use of My Sensitive Personal Information” link.

Cookies and local storage

Clerk uses cookies or similar storage to keep you signed in. The browser may also store a flag that a free download was used on this device if you are not signed in. We do not use third-party advertising cookies or a marketing analytics product. You can block cookies in your browser; the Service may not sign you in if you do.

Retention

• Documents: not retained by us. They exist only in your tab until you close it or clear the session.
• Account: until you delete the account, plus a short period in backups or logs, and longer if we must keep records for a dispute, fraud, tax, or legal hold.
• Free-download flag: for the life of the account.
• Payment records: as long as Stripe and tax rules require.
• Server logs: for a short operational period set by the host, unless needed for security.

Security

We use HTTPS, a major auth provider, and a major payments provider. No method of transmission or storage is perfectly secure. Because documents never leave the device, the main remaining risks are your device, your account login, and the copy you later choose to send somewhere else.

Your privacy rights

Depending on where you live (including California and other U.S. states with similar laws), you may have the right to:

• Know / access the personal information we have about you
• Correct inaccurate personal information
• Delete personal information, subject to legal exceptions
• Opt out of sale or sharing — we do not sell or share, so there is nothing to opt out of today
• Limit use of sensitive personal information — we do not use it for extra purposes
• Not be discriminated against for exercising these rights
• Use an authorized agent, with proof we can reasonably verify

We will not deny the Service, charge a different price, or provide a different quality because you exercised a privacy right, except as the law allows (for example, if we must keep a payment record).

How to make a request

Use either:

• Email contactomitdoc@gmail.com from the address on your OmitDoc account with the subject “Privacy request,” or
• The account menu, to sign out or delete the Clerk account where that control is offered

We will verify you by matching the email to the account. We may ask a reasonable follow-up question if the request is sensitive. We will respond within the time the applicable law requires (generally 45 days under the CCPA, with a possible extension). We cannot produce a copy of a document you opened in the tool, because we never received it.

California “Shine the Light” (Civil Code § 1798.83): we do not disclose personal information to third parties for their own direct marketing.

People outside the United States

The Service is operated from the United States. If you use it from another country, account and payment data are processed in the U.S. and in other countries where Clerk, Stripe, or Vercel operate. Those countries may not provide the same legal protections as your home country. If you are in the EEA, UK, or Switzerland, our legal bases for account data are performing the contract (sign-in and paid plans) and legitimate interests (security and fraud prevention). You may have additional rights under GDPR; email us to exercise them. We do not currently appoint an EU representative or offer a separate DPA for document processing, because we do not receive the documents.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. You must be 18 to create a paid account. If you believe a child gave us account information, email us and we will delete it.

Changes

We may update this policy. The “Effective” date at the top will change. If a change is material, we will take additional reasonable steps, such as a notice on the site or an email to the address on your account. Continued use after the new effective date means you accept the update.

Contact

OmitDoc
https://omitdoc.com
contactomitdoc@gmail.com

Related: Terms of Use (plans, automatic renewal, cancel, refunds, and liability).