Legal

Privacy Policy

Effective: April 13, 2025

1. Overview

Interconnect Systems LLC(“Company,” “we,” “us,” or “our”) operates DocGen. This Privacy Policy describes what information we collect, how we use it, how long we retain it, and your rights with respect to it. We are committed to handling your data minimally and transparently.

By using DocGen you consent to the practices described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 GitHub Account Data (via OAuth)

When you sign in with GitHub we receive the following from GitHub’s OAuth API:

GitHub username — used to identify your account and enforce usage limits
GitHub user ID — used as a stable account identifier
Profile name and avatar URL — displayed in the UI
OAuth access token — stored in your session (server-side, encrypted) to fetch repositories on your behalf. Not persisted to our database.

We request only the minimum GitHub OAuth scopes necessary to read repository metadata and content. We do not request write access, webhook access, or access to your GitHub organizations beyond what you explicitly authorize.

2.2 Repository Content

When you submit a repository URL, DocGen fetches that repository’s file tree and content via the GitHub API using your OAuth token (for private repos) or unauthenticated access (for public repos). This content is:

Transmitted to a third-party processing provider for analysis and document generation
Not permanently stored by us — repository content is held only in memory during the generation request and discarded immediately after
Never used to train models by us
Never sold or shared with third parties beyond what is necessary to fulfil your request

2.3 Generated Documents

Documents generated on your behalf are stored in encrypted cloud object storage and linked to your job record. These are retained for up to 7 days from the time of generation, after which they are permanently and automatically deleted. You may download and delete your documents at any time from the results page.

2.4 Job Metadata

We store job records in a secure cloud database that include:

Job ID, status, and timestamps
Project name and organization name (as entered by you)
Document types generated and counts
Token usage counts and estimated cost (no financial data)
Your GitHub username (to associate the job with your account)

Job metadata is retained for up to 30 days, then purged.

2.5 Usage Tracking

We maintain a per-user usage counter to enforce demo limits. This records the number of generation jobs you have run. No detailed behavioral tracking or analytics beyond operational usage counts is performed.

2.6 Email Address

If you receive a job completion email, your email address is obtained from GitHub’s OAuth profile (if public) and used solely to deliver that notification via a transactional email provider. We do not send marketing email. We do not add you to any mailing list.

2.7 Log Data

Our infrastructure automatically collects standard server log data including IP addresses, request timestamps, HTTP status codes, and user agent strings. This data is used solely for debugging and operational monitoring.

3. How We Use Your Information

To authenticate you and maintain your session
To fetch and analyze repositories you submit
To generate and deliver documents you request
To enforce usage limits and prevent abuse
To send transactional notifications (job completion emails)
To debug operational issues and maintain service reliability
To comply with legal obligations

We do not use your data for advertising, profiling, or any purpose beyond operating the Service.

4. Third-Party Data Processors

We share data with the following processors solely to operate the Service. Each is contractually bound to process data only on our behalf:

Analysis ProviderDocument generationData shared: Repository content, project metadata

Authentication ProviderOAuth sign-in and repository accessData shared: OAuth token exchange; repository content fetched on your behalf

Cloud InfrastructureHosting, document storage, job data storageData shared: All service data at rest and in transit

Email ProviderTransactional email deliveryData shared: Email address, job completion details

5. Data Retention Summary

Session / OAuth tokenDuration of browser session

Generated documents7 days, then auto-deleted

Job metadata30 days, then purged

Usage countersRolling 30-day window

Server logs~30 days

6. Security

We implement reasonable technical and organizational measures to protect your data, including:

TLS encryption for all data in transit
Encrypted session storage (NextAuth with AUTH_SECRET)
Access-controlled cloud storage with scoped credentials
No storage of OAuth tokens beyond the active session

No method of transmission or storage is 100% secure. We cannot guarantee absolute security. If you become aware of a security concern, please contact us immediately at legal@interconnectsystemsllc.com.

7. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 where applicable under local law). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access — request a copy of the data we hold about you
Deletion — request deletion of your account data and any stored documents or job records
Correction — request correction of inaccurate data
Portability — request your data in a machine-readable format
Opt-out — you can revoke GitHub OAuth access at any time via GitHub Settings → Applications

To exercise any of these rights, contact us at legal@interconnectsystemsllc.com. We will respond within 30 days.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at legal@interconnectsystemsllc.com.

10. GDPR (EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, our legal bases for processing your personal data are: (a) performance of a contract (to provide the Service you requested); (b) legitimate interests (security, abuse prevention, service improvement); and (c) your consent (where required). You have the right to lodge a complaint with your local supervisory authority.

11. International Transfers

Your data may be processed in the United States and other countries where our processors operate. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page. Continued use of the Service after any change constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions, requests, or concerns, contact Interconnect Systems LLC at legal@interconnectsystemsllc.com.