Back to DocDealer

    Last updated: 10 June 2026

    Privacy Policy

    This notice explains how DocDealer handles platform data, cookies and analytics. Customer matter data inside documents and attachments is processed under the customer organization's instructions.

    Roles

    For client or matter data entered into documents, the customer organization is normally the data controller and DocDealer acts as data processor. For account security, service operation, abuse prevention and vendor management, DocDealer may act as an independent controller.

    Data we process

    DocDealer processes account profile data, authentication sessions, organization membership, documents, form data, attachments, AI extraction results, operational logs and billing or usage metadata needed to provide the service.

    We do not intentionally send document contents, form data or attachments to analytics providers.

    Cookies and analytics

    Strictly necessary cookies support authentication, security, language, theme and interface preferences. These are required for the service and do not require analytics consent.

    Analytics tools, including PostHog and Google Analytics 4 through Google Tag Manager, load only after you explicitly accept analytics cookies. If you decline or make no choice, DocDealer does not initialize PostHog or inject the Google Tag Manager script or noscript iframe.

    DocDealer uses Google Consent Mode v2. Analytics storage is denied by default, and advertising storage, ad user data and ad personalization remain denied. When analytics is accepted, analytics storage is granted for GA4 measurement.

    Separately from analytics, DocDealer collects server-side operational telemetry — application logs, request traces and backend error reports (via PostHog) — under legitimate interest for security, reliability and abuse prevention. This is generated on our servers, sets no cookies, is not tied to analytics consent, and excludes document, form and attachment contents.

    • Consent is granular: the Analytics and Marketing categories can be accepted or declined independently
    • PostHog client analytics loads only after consent
    • Google Tag Manager container: GTM-W3TMJPD2
    • Consent preference cookie: dd-consent, retained for 180 days
    • Analytics data may include page URLs, browser and device information, approximate geography and page interactions
    • Server-side operational telemetry (logs, traces, error reports) runs under legitimate interest, without cookies, and is independent of analytics consent

    Your choices

    Use the cookie settings control on this page to accept or decline analytics. You can also use Google's Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

    Google privacy configuration

    DocDealer must keep Google's Data Processing Terms accepted in the Google admin console, disable Google Signals unless a separate lawful basis and consent flow exists, minimize GA4 event data retention, and keep optional Google data-sharing settings disabled unless separately reviewed.

    Contact

    For privacy questions or data rights requests, contact product@thedocdealer.com. Customer document data requests may need to be handled with the relevant customer organization as controller.