Privacy Policy

1. Data controller

Francisco Javier Moreno Alcaide · Málaga (Spain) · Email: hello@cofferdock.com.

2. What data we process and why

• Account data: your email and password (always stored hashed, never in clear text), to identify you, give you access and send service notices (verification, security).
• API keys: we only store a hash of each key (not the clear key), to authenticate your API calls.
• Usage logs: date, tool used, format, size of the result and number of uses per account/key, to enforce your quota and ensure the service works correctly. Kept for 90 days. They never include the content of what you send.
• Payment data: if you subscribe, billing is handled by Stripe. We only store identifiers (Stripe customer and subscription) and your plan status; we never store your card details.
• Chat assistant (optional): if you use the site's virtual assistant, your question (and, if needed to understand a follow-up question, the last few messages of the conversation) is sent to our chat server (chat.noteveryone.com, on the same OVH server as the rest of the service) and from there to OpenAI, which writes the answer. We do not store your questions or the answers; we only log technical data about each question (time, duration and length, without its text) to run the service and control its cost. In your browser the conversation is kept only while the tab is open (session storage, no cookies) and the “Clear chat” button deletes it at once. If you don't use it, no question is sent; when the page loads, however, your browser downloads the assistant's script from our chat server, which, like any server, may keep technical access logs (such as the IP address) for a short time. It is an automated assistant using artificial intelligence and it can make mistakes. Please don't write personal or sensitive data in the chat.

Important: everything you send to the tools (HTML, PDFs, images, forms, chart data, web addresses to capture, read or turn into PDF, text to validate) and everything we generate (images, PDFs, zip files, screenshots, text) is not stored: it is processed in memory only for as long as it takes to return your result, then discarded. We do not read or analyse the content, and we never use it for any other purpose.

3. Legal basis

We process your data to perform the contract (provide the service), on legitimate interest (security and abuse prevention), on your consent (when registering and accepting this policy) and to comply with legal obligations (e.g. invoicing). For the chat assistant (optional), the basis is your own request when you use it and our legitimate interest in answering your questions about the service.

4. Processors

We do not sell your data or share it with third parties other than the providers listed below, or where required by law. We rely on the following providers acting as processors under GDPR safeguards:

• OVH: server hosting, in European Union data centers.
• Stripe: payment processing (Stripe Payments Europe).
• Resend: transactional email delivery (verification, notices), with appropriate safeguards for international transfers.
• Microsoft Clarity (Microsoft Ireland Operations Ltd.): usage analytics and anonymous session recording to understand how the site is used and improve it. It only runs if you accept the analytics cookies in the site banner; if you decline, it is not loaded. We flag the chat assistant so that Clarity does not record what is typed in it.
• OpenAI (artificial intelligence provider based in the United States): only if you use the chat assistant; it writes the answer from your question, which may involve an international transfer of data outside the European Union. According to its documentation, data sent through its API is not used to train its models and may be kept for up to 30 days to detect abuse.

5. Retention

We keep your account data while your account exists. If you cancel, we delete it within a maximum of 30 days, except what the law requires us to keep (e.g. billing data). Usage logs are kept for a maximum of 90 days. Chat assistant questions and answers are not stored on our server.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, portability and restriction by writing to hello@cofferdock.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Security

We apply reasonable technical and organizational measures: passwords protected with hashing (argon2id), API keys stored only as hashes, encrypted traffic (HTTPS) and access control. No system is 100% foolproof, but we work to protect your data.

8. Minors

The service is intended for professionals and businesses, not minors. If you believe a minor has provided us data, contact us and we will delete it.