We collect only what we need, protect it with encryption, and never sell it. Here's the full picture.
Last updated: March 13, 2026
Payments are processed by Stripe. We never store credit card numbers or CVVs. We retain only your Stripe customer ID and subscription status.
We do not sell your personal information. Ever.
Service providers
Supabase (database), Stripe (payments), Resend (email), and Vercel (hosting) process data on our behalf under contractual obligations.
Your organization
Team members in your BopDocs workspace can view shared templates, requests, and submissions.
Your clients
Clients see your organization name, logo, and the checklist you created. They cannot see other clients' data.
Legal requirements
We may disclose information if required by law, subpoena, or court order, or to protect the rights and safety of our users.
AES-256 encryption
All data encrypted at rest
TLS 1.2+
All connections over HTTPS
Isolated storage
Files in access-controlled buckets
Row-Level Security
Orgs can only see their own data
Bcrypt hashing
Passwords with per-user salts
SOC 2 infrastructure
Supabase + Vercel compliance
For more details, see our Security page.
Active accounts
Data retained for as long as your account is active.
Deleted accounts
Personal data and uploaded files removed within 30 days. Anonymized usage data may be retained.
Client submissions
Retained as long as the request exists. Organization owners can delete requests and submissions at any time.
Backups
Encrypted backups retained for up to 30 days, then automatically purged.
Depending on your jurisdiction, you have the right to:
To exercise any of these rights, email privacy@bopdocs.com.
We use cookies to maintain your authentication session and remember preferences. For full details, see our Cookie Policy.
BopDocs is not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
BopDocs is operated from the United States. If you access our service from outside the US, your information may be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers.
We may update this policy from time to time. We'll notify you of material changes by email or by posting the updated policy here. Continued use of BopDocs after changes constitutes acceptance.
Questions? Email privacy@bopdocs.com
Join professionals who’ve automated document collection and reclaimed their time.