Privacy Policy

Effective date: November 7, 2026

This Privacy Policy explains what information MyDocUploads collects, how we use it, who we share it with and the choices you have. MyDocUploads is a ConsultraCloud app provided by Confluence Enterprises LLC, 3825 Leonardtown Road, Suite 5, Waldorf, MD 20601 (“MyDocUploads”, “we”, “us”). It covers our website at mydocuploads.com and the MyDocUploads app.

1. Two kinds of people use MyDocUploads

Customers are the businesses that sign up for MyDocUploads, and the people on their team who sign in with an account (seats). External users are the people a customer sends a link to: clients who upload files, people who fill in a form, signers and people who open a Secure Drop message. External users never need an account.

When a customer uses MyDocUploads to collect, store or share documents and information, the customer decides what is collected and why. We handle that content on the customer’s behalf and under the customer’s instructions. If you are an external user and have a question about information you sent to a business through MyDocUploads, please contact that business first. We will help them answer you.

2. Information we collect

Account information. Your name, email address, company name and the settings you choose. If you choose “Sign in with Google”, Google shares your name and email address with us. If you turn on two-step sign-in, we store the secret needed to check your codes, encrypted.

Billing information. Payments are handled by Stripe. You enter your card details into Stripe’s payment form, and Stripe processes them. We receive details such as your plan, billing contact and payment status.

Customer content. The files, folders, comments, approvals, Secure Drop messages, form questions and answers, and documents for signature that customers and external users add to MyDocUploads.

Information about external users. What we record depends on what the person does:

• Signers: name, email address, phone number (if the sender asks for it), what they fill in and their signature, IP address, browser, device type, time zone, timestamps and a city-level location worked out from the IP address. These details form the signing record.
• People who fill in a form: their answers, IP address, browser, device type and time zone.
• People who upload to a file request: name, email address, the files they upload, IP address and browser.
• People who open a Secure Drop message: when they opened the link, IP address and browser, and the email address the link was sent to if the sender emailed it from MyDocUploads.

Activity and security logs. To keep accounts secure and give customers an audit trail, we log who did what and when, with the IP address and browser used. Sign-in logs record the IP address and browser. City-level locations are worked out from IP addresses using a database stored on our own servers, so this lookup does not send your information to anyone else.

Website information. If you accept analytics cookies on our website, Google Analytics collects information about how you use our public pages (see section 5). If you contact us, we keep what you send us.

3. How we use information

• To provide MyDocUploads: storing and showing files, sending links and notifications, running forms, Secure Drop and signing, and keeping each workspace’s activity record.
• To keep the service secure: checking uploads for malware, detecting misuse and protecting accounts.
• To bill you and manage your subscription.
• To send service emails, such as notifications, security alerts, billing notices and the notices described in section 8.
• To answer support and sales questions.
• To understand how people use our public website, only if you accept analytics cookies.
• To meet legal obligations and enforce our Terms.

We do not sell personal information. We do not use customer content for advertising. We do not send customer content to any AI service.

4. Who we share information with

We share information only with service providers that help us run MyDocUploads, and only for that purpose:

• Amazon Web Services: hosting, file storage, the database, encryption keys, malware scanning, logs and sending email (Amazon SES).
• Stripe: payments and billing.
• Google: “Sign in with Google” if you choose it; Google Analytics on our public website if you accept analytics cookies; and Google Fonts, which our website loads, so your browser’s IP address reaches Google when a page loads.
• Our website host: Namecheap (EasyWP) hosts our marketing website. The website does not hold customer content.

We may also share information if the law requires it, to protect the rights, safety or property of our customers, external users or us, or as part of a merger, sale or transfer of the business, in which case this policy continues to apply to the information transferred.

Customers can share content with the people they choose. What a customer shares is up to the customer.

5. Cookies and similar technologies

In the app. The MyDocUploads app sets no cookies of its own. It keeps your sign-in session and display preferences in your browser’s local storage. Stripe may set its own cookies on the billing page to process payments and prevent fraud.

On our public website. We use Google Analytics only after you click Accept on our cookie banner. If you click Decline, no analytics cookies are set. You can change your choice at any time with the Cookie settings link in the website footer. Google Analytics never runs inside the app or on pages opened from a link (Secure Drop messages, signing, shares, forms and file requests).

6. Where information is stored

Customer content and account information are stored with Amazon Web Services in the US East (N. Virginia) region, in the United States. Files are not copied to another region. MyDocUploads is offered to customers in the United States only.

7. How we protect information

• Connections to MyDocUploads use TLS 1.2 or TLS 1.3.
• Each file is encrypted with its own key, protected by AWS Key Management Service, and the storage holding files adds AES-256 encryption.
• Secure Drop messages and attachments, and two-step sign-in secrets, are encrypted item by item with keys protected by AWS Key Management Service.
• Files uploaded to workspaces, file requests and forms are scanned for malware.
• Customers control who can see each workspace, folder and file, and each workspace keeps an activity record.
• The database is backed up every day, and each backup is kept for 7 days.

No method of storing or sending information is completely secure, and we cannot promise that information will never be accessed without permission. If we learn of a security incident that affects your information, we will notify you as the law requires.

8. How long we keep information

• When you delete a file, it moves to Trash, where it stays until you empty Trash or delete it forever. Deleting forever removes the file’s stored data, every version and its records. Copies are permanently removed from storage within 30 days, and database backups are kept for up to 7 days.
• Activity and security logs are kept for 1 year, then deleted automatically.
• If an account has no plan in force (a plan was canceled, a trial ran out or a plan was never started), it becomes read-only. The owner can still sign in, view and download every file, but cannot add anything new until a plan is chosen.
• When a subscription is canceled, the organization and its files are permanently deleted 60 days after the plan ends. We email the account owner 14 days and 3 days before deletion.
• We keep billing records as long as tax and accounting laws require.

9. Your choices and rights

• You can view and update your account information in the app.
• You can download any file at any time. Business plans and up can also export the workspace audit log.
• You can ask us for a copy of your personal information, or to correct or delete it, by emailing privacy@mydocuploads.com. We may need to confirm your identity first.
• You can change your cookie choice on our website with the Cookie settings link.
• You can opt out of marketing emails with the unsubscribe link. We will still send service emails while you have an account.

Depending on where you live, you may have other rights under state privacy laws. We will respond to requests as those laws require. If you are an external user, we may refer your request to the customer who sent you the link, because they control that information.

10. Health information

A HIPAA Business Associate Agreement is available on request. Customers that are covered entities or business associates under HIPAA must sign one with us before adding protected health information. Contact sales@mydocuploads.com.

11. Children

MyDocUploads is a business service and is not meant for children. We do not knowingly collect personal information from children under 13.

12. Changes to this policy

If we make a material change, we will tell customers by email or in the app before it takes effect, and update the effective date above.

13. Contact us

Questions about privacy: privacy@mydocuploads.com.
By mail: Confluence Enterprises LLC, 3825 Leonardtown Road, Suite 5, Waldorf, MD 20601.