
DocFlow Governance & Compliance
Legal, Privacy, and Service Terms
Clear commitments regarding our terms of service, customer rights, data protection practices, and payment transparency.
Last updated: September 30, 2026
1. Terms of Service
By creating an account or accessing DocFlow, you agree to enter into a legally binding agreement with DocFlow Inc. You must be at least 18 years old or the legal age of majority in your jurisdiction to use the service.
Intellectual Property & Repositories: You retain all ownership rights and intellectual property in the repositories and codebases you ingest into DocFlow. By using the platform, you grant DocFlow a limited license strictly to parse, index, generate vector embeddings, and synthesize answers solely for your authorized workspace users.
AI & Output Disclaimer: DocFlow utilizes large language models and retrieval-augmented generation (RAG) to assist developers. While we prioritize high indexing accuracy, artificial intelligence outputs may occasionally contain inaccuracies or incomplete reasoning. You agree to review and validate all code recommendations and documentation prior to production deployment.
Disclaimer of Warranties & Limitation of Liability: DocFlow is provided on an “AS IS” and “AS AVAILABLE” basis without warranties of any kind. To the maximum extent permitted by applicable law, DocFlow Inc. shall not be liable for any indirect, incidental, or consequential damages resulting from downtime, code vulnerabilities, or data loss.
2. Privacy Notice (GDPR & CCPA Compliant)
DocFlow respects your privacy and adheres to the principles of data minimization and purpose limitation under GDPR (Regulation EU 2016/679) and CCPA.
Data We Collect:
- Account details: Email address, username, optional name, and optional avatar image.
- Authentication metadata: Passwords stored as one-way salted bcrypt hashes; OAuth tokens.
- Connected Codebase Metadata: Repository URLs, branch names, commit hashes, AST schema definitions, and vector embeddings generated from code files.
- Billing & Subscription status: PayPal transaction IDs and tier allocations (we do not process or store raw credit card numbers).
Sub-Processors: DocFlow engages trusted sub-processors under strict data processing agreements:
| Sub-Processor | Purpose | Location |
|---|---|---|
| OpenAI | Text embeddings and LLM conversational reasoning | United States |
| PayPal | Subscription billing and payment gateway | United States / Global |
| Cloudinary | User profile avatar media storage | United States |
| GitHub | OAuth authentication & repository access | United States |
No Sale of Personal Data: We never sell, rent, or trade personal data or code repositories to third parties for advertising or profiling.
3. Refund & Cancellation Policy
DocFlow offers transparent subscription billing for Pro ($20/month) and Premium ($75/month) tiers.
- Cancel Anytime: You may cancel your subscription at any time directly through your account dashboard or your PayPal pre-approved payments dashboard. Upon cancellation, your access remains active until the end of your prepaid billing period.
- 14-Day Money-Back Guarantee (Statutory Withdrawal): If you are unsatisfied with your first subscription cycle or are an EU/UK consumer exercising statutory right of withdrawal, you may request a full refund within 14 days of your initial purchase date by emailing docflow.work@gmail.com.
- Service Outages: In the unlikely event of continuous platform downtime exceeding our standard service expectations, prorated billing credits or refunds may be granted upon request.
5. Children's Privacy (COPPA & GDPR Art. 8)
DocFlow is a professional codebase intelligence tool intended solely for developers, engineering teams, and adult business professionals.
We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18 (or under 16 within the European Economic Area). If you believe a minor has created an account without parental consent, please contact us at docflow.work@gmail.com and we will promptly delete all associated data.
6. Data Deletion & Privacy Rights
Under GDPR (Articles 15-22) and CCPA, you possess comprehensive rights over your personal data:
- Right to Erasure (Right to be Forgotten): You have the right to request complete deletion of your account, repositories, vector embeddings, and chat history.
- Right of Access & Portability: You may request an exported copy of your account profile and connected data.
- Right to Rectification: You may correct or update your profile information anytime via user settings.
To initiate an account or data deletion request, send an email to docflow.work@gmail.com with the subject line “GDPR Data Deletion Request” from your registered email address. We verify identity and complete purge requests within 30 days in compliance with statutory deadlines.
7. Business & Operator Details
Operating Entity: DocFlow Inc.
Lead Maintainer:Omar Wael
Official Contact: docflow.work@gmail.com
Repository: github.com/OmarAboelnaga121/DocFlow
DocFlow is governed in accordance with international data protection principles and standard commercial e-commerce safeguards.