Privacy Policy

Last Updated: July 2, 2026

Welcome to DocXAI (operated by Infinity AI Technologies Inc.). We are committed to protecting the privacy and security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.docxai.ca) or use our AI-powered document processing platform, autonomous agents, and related services (collectively, the "Services").

Our Core Data Philosophy: You Own Your Data

Zero Model Pollution: We do not use your proprietary business documents, extracted schemas, or processed text to train our base foundational LLMs or share them across tenants.
Data Isolation: Your documents are strictly partitioned to your account instance.
Transient by Default: We offer automated retention controls. Once an AI agent finishes an orchestration pipeline, data is stored only for your requested historical audit windows.

1. Information We Collect

A. Customer Data (Information You Upload for Processing)

This includes documents, PDFs, images, invoices, spreadsheets, and emails that you submit to our Intelligent Document Processing (IDP) pipelines. These documents may contain Personally Identifiable Information (PII) such as names, physical addresses, phone numbers, and emails, or sensitive financial data.

B. Account & Operational Data

Information you provide when establishing your DocXAI account, such as your name, business email, billing address, phone number, hashed passwords, and usage metadata (API endpoint logs, volume of pages processed).

2. How We Use Your Information

We process your data strictly to fulfill our contractual obligations to you and run our business securely:

To provide, maintain, and optimize the document extraction and autonomous workflows.
To monitor platform performance, prevent system abuse, and maintain high availability.
To run threat analysis and track access audit logs.

3. How We Share & Disclose Information

We do not sell, rent, or trade your data. We only share information with verified cloud infrastructure subprocessors (such as Microsoft Azure) to host software or execute machine learning models under strict Data Processing Agreements (DPAs), or when required by legally binding corporate regulatory or court orders.

4. Compliance Frameworks & Regional Rights

As a Canadian platform, we comply fully with the Personal Information Protection and Electronic Documents Act (PIPEDA). We also support signed DPAs featuring Standard Contractual Clauses (SCCs) for GDPR compliance, and provide automated PII masking modules to assist with CCPA and HIPAA frameworks.

5. Contact Us

To exercise any of your data privacy or extraction access rights, contact our Data Protection Officer at: privacy@docxai.ca.