Legal

Privacy Policy

Last updated: April 15, 2026

1. Introduction

SOPdoc (“we,” “us,” or “our”) operates the SOPdoc platform at sopdoc.ai. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

By using SOPdoc, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

2. Information We Collect

Account information

When you register, we collect your name, email address, and authentication credentials. If you sign in via Google or GitHub, we receive your profile information from those providers.

Document content

We store the SOPs, checklists, and other documents you create, including all revisions and version history. This content is yours and is stored solely to provide the service.

Payment information

Payments are processed by Stripe. We do not store your credit card number. Stripe may collect billing details in accordance with their privacy policy.

Usage & analytics data

With your consent, we use Google Analytics to collect anonymized usage data such as pages visited, browser type, and referring URLs. You can opt out via the cookie consent banner or your browser settings.

Communications

If you contact us (e.g. via our contact form), we collect your name, email, and message content to respond to your inquiry.

3. How We Use Your Information

  • Provide, maintain, and improve the SOPdoc service
  • Process transactions and manage your subscription
  • Generate and refine documents using AI on your behalf
  • Send transactional emails (account, billing, security)
  • Respond to support requests and inquiries
  • Analyze usage to improve the product (with consent)
  • Comply with legal obligations

4. AI Processing

When you use AI features, your prompts and relevant document content are sent to OpenAI to generate or refine text. We use the OpenAI API with data privacy protections enabled — your content is not used to train OpenAI's models. Data sent to OpenAI is subject to their API data usage policy.

5. Third-Party Services

We use the following third-party services to operate SOPdoc:

  • Neon — database hosting (PostgreSQL)
  • Stripe — payment processing
  • OpenAI — AI document generation
  • Google Analytics — anonymized usage analytics (consent-based)
  • Resend — transactional email delivery
  • Vercel — application hosting

Each provider processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

6. Cookies

We use cookies for essential functionality (authentication, session management) and, with your consent, for analytics (Google Analytics). You can manage your cookie preferences through the consent banner shown on your first visit or by clearing your browser's local storage.

  • Essential cookies — required for authentication and core functionality; cannot be disabled
  • Analytics cookies — used by Google Analytics to understand usage patterns; loaded only with your consent

7. Data Security

All data is encrypted in transit (TLS) and at rest. We use industry-standard security practices including secure authentication, environment-isolated credentials, and regular access reviews. While no method of transmission or storage is 100% secure, we take reasonable measures to protect your data.

8. Data Retention

We retain your account and document data for as long as your account is active. If you delete your account, we will delete your personal data and documents within 30 days, except where retention is required by law (e.g. billing records).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your documents (PDF export is available on all plans)
  • Withdraw consent for analytics cookies at any time
  • Object to or restrict certain processing

To exercise any of these rights, contact us at hello@sopdoc.ai.

10. Children's Privacy

SOPdoc is not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: