DocnestPrivacy Policy
1. Controller
| Name | Seonghun Jeon (전성훈) |
|---|---|
| Doing business as | Sanmaru Studio (산마루스튜디오) |
| Business registration | 777-05-04019 |
| Address | Munseong-ro 38-gil, Gwanak-gu, Seoul, Republic of Korea |
| Contact | [email protected] |
Our privacy officer is Seonghun Jeon.
2. The app and your documents
Docnest reads documents on your Mac and shows them there. Your documents and conversation text are not sent to us. The app exchanges the following with our server:
- On first launch, including before any purchase: a value that tells your Mac apart and the time your trial started, so that each Mac gets one trial. That value is a hash of the Mac's hardware UUID mixed with an app-specific value. The UUID itself is not sent.
- When you register a purchase code: the code and the same value, to tie one code to one Mac. Once registered, that value is linked to your purchase email, so it is pseudonymous rather than anonymous.
- At most once a day: a license ID, to check that the license is still valid. We keep only the time of the last check, not a history of when you opened the app.
File names and your computer's name are not sent, and we don't use these values for analytics. The app also checks for new versions. It does not send usage statistics. If that ever changes, we will update this policy first and ask for your separate consent. Bug reports are public GitHub issues that you write and post. You can review the text before posting.
3. This website
docnest.net has no advertising and no tracking cookies, and it stores no visitor identifier in your browser. It processes four things:
- Hosting: Cloudflare processes standard request data, such as IP address, to serve and protect the site, and may set a security cookie to stop bots.
- Visit statistics: Cloudflare Web Analytics shows us pages, referrers, countries and device types as statistics. It uses no cookies.
- Unique visitors per day: our server mixes that day's random value, your IP address and browser details into a one-way hash, and stores only the start of that hash and your country. It does not store your IP address or browser details. The random value is deleted the next day, so a stored hash can't be tied back to an IP address.
- Purchase steps: viewing the pricing card, pressing Buy, and opening and completing checkout are counted per day, as totals only.
Your theme choice is saved in this browser. The email address shown on the checkout success page stays in your browser only until you close that tab.
4. Purchases and licenses
When you buy, Paddle.com processes your payment and billing details as Merchant of Record under its own privacy policy. We receive your email address and order details (transaction ID, price, amount, currency) to issue and support your license. They are stored on Cloudflare's servers and database, and license emails are sent through Resend.
5. How long we keep data
| Data | Period |
|---|---|
| Order and payment records and your email address | 5 years, as Korean e-commerce law requires |
| The value that tells your Mac apart and its trial, registration and last check times | 5 years, like order and license records. Macs that never bought are kept for the same period so that each gets one trial |
| Unique-visitor hashes and countries | 400 days |
| Purchase step counts | No set limit, because they are totals that identify no one |
6. Transfers abroad
To provide the service, we send data over the network to these companies:
| Company (country) | What it does | Data it receives |
|---|---|---|
| Paddle (Paddle.com Market Limited in the United Kingdom and its affiliates) | Payment, billing and tax | Payment and billing details |
| Cloudflare, Inc. (United States) | Website, server, database and visit statistics | Request data, email address, order details and the value that tells your Mac apart |
| Resend (United States) | Sending license emails | Email address and purchase code |
Data at Cloudflare is kept for the periods in section 5. Paddle and Resend keep data under their own policies.
7. Your rights
You can ask to see, correct or delete your data, or to stop its processing, by writing to [email protected]. Records the law requires us to keep are deleted when that period ends. You also keep any other rights the law of your country gives you, such as data portability, objection and complaint to a regulator.
8. Changes
We will post any change here with its date.