DocTick
Back to Home

Privacy Policy

Effective Date: September 4, 2026

1. Overview

DocTick ("we," "our," or "us"), available at https://doctick.com, provides a streamlined document collection portal for professionals (such as accountants, mortgage brokers, and legal advisors) to securely request, receive, and organize documents directly into their own Google Drive storage.

We respect your privacy and are committed to protecting your personal data and the confidentiality of files uploaded through our platform.

2. Information We Collect

When you register, sign in, or interact with DocTick, we collect the following categories of information:

  • Account Information: When you authenticate via Google Sign-In, we receive your name, email address, profile picture, and Google account identifier to create and manage your account.
  • Google Drive Authorization Tokens: OAuth 2.0 access and refresh tokens required to interact with your Google Drive strictly within the permissions you grant.
  • Document Request Metadata: Names of clients you create requests for, requested document checklist items, custom instructions, status flags (e.g. pending, uploaded, approved), and audit timestamps.
  • Uploaded Document Metadata: File names, file sizes, MIME types, and upload timestamps. Note: Files uploaded by your clients are streamed directly to your designated Google Drive folder and are not permanently stored on DocTick application servers.

3. Google API Services User Data Disclosure & Limited Use

DocTick's use of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.

Scope Requested: We request the https://www.googleapis.com/auth/drive.file scope. This restricted scope allows DocTick only to see, create, and modify files and folders that were created by or opened with DocTick. DocTick cannot view, access, or modify any other files or folders in your Google Drive.

Limited Use Commitments:

  • We access your Google Drive strictly to create dedicated client folders and upload requested client documents.
  • We do not transfer, sell, or disclose your Google user data or files to any third party, except as necessary to deliver our core service or comply with applicable laws.
  • We do not use Google user data or files for serving advertisements, retargeting, or personalized marketing.
  • We do not use or allow humans to read Google user data or files, unless you explicitly grant permission for technical troubleshooting, it is necessary for security investigations, or it is required by law.
  • We do not use Google user data to train, fine-tune, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models.

4. How We Use Your Information

We use the data we collect solely to:

  • Authenticate your identity and provide you with access to the DocTick platform.
  • Create and manage client document requests and shareable secure upload links.
  • Automatically organize client uploads into labeled subfolders within your Google Drive.
  • Send transactional email notifications and automated reminders to your clients regarding pending checklists.
  • Provide customer support and resolve technical inquiries.

5. Data Storage and Security

We implement industry-standard administrative, physical, and technical safeguards to protect your personal information:

  • Cloud Infrastructure: DocTick is hosted on Google Cloud Platform (Google Cloud Run & Cloud Firestore) in high-security, ISO 27001 and SOC 2 compliant data centers.
  • Encryption: All data transmitted between your browser, our servers, and Google APIs is encrypted using TLS 1.3/HTTPS. Data stored in Cloud Firestore is encrypted at rest using AES-256.
  • Zero File Storage: Files uploaded through client portals are streamed directly to your Google Drive via resumable upload streams and are never stored on DocTick hard drives.

6. Data Retention and Deletion

We retain your account profile and request metadata for as long as your account remains active. You maintain complete control over your data:

  • Revoking Google Access: You can revoke DocTick's access to your Google account at any time by visiting Google Account Permissions.
  • Account and Data Deletion: You may request complete deletion of your account, request histories, and stored tokens by emailing us at contact@doctick.com. All associated records will be permanently purged within 30 days.

7. Changes to This Policy

We may update this Privacy Policy periodically to reflect enhancements to our service or changes in legal requirements. We will notify registered users of material updates via email or prominent notices on our website.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our data protection team:

DocTick Support & Privacy Team

contact@doctick.com