Privacy Policy

Last updated: July 28, 2026

1. Zero Telemetry in Core Tools

The open-source docmd CLI engine (`@docmd/core`) operates with strict zero telemetry by default. We do not track, collect, or transmit your local file structures, command usage, build metrics, or documentation content.

2. docmd cloud & Account Authentication

When you register for a docmd cloud dashboard account via OAuth, we collect minimal profile metadata necessary to maintain your session:

Account ID, Name, and Email address provided by your chosen identity provider.
Session tokens stored securely in HTTP-only browser cookies.

3. BYOK Key Encryption & Relay Security

When you configure Bring Your Own Key (BYOK) AI provider keys in your docmd cloud dashboard:

Keys are encrypted client-side and stored in cloud data stores encrypted at rest with envelope encryption and hardware security module (HSM) key management systems.
Relay requests decrypt keys temporarily in serverless memory solely for forwarding authorized API calls to your configured model endpoints.
We never log, store, or sell your API keys or completion prompts.

4. Analytics & Web Privacy

On docmd.io static marketing pages, we utilize standard website analytics with IP anonymization enabled to aggregate page view metrics and optimize site navigation. No personal data or search queries are stored or shared.

5. Your Rights & Data Deletion

You have the right to request full deletion of your registered docmd cloud account, registered site origins, and encrypted API key records at any time by deleting your site configurations directly in the dashboard or by contacting support.