Privacy Policy

This Privacy Policy explains how AUSPRO PTY LTD (“DocSemantic,” “we,” or “us”) collects, uses, shares, and protects information when you use our service, CLI, APIs, and website (the “Service”). It applies to information about account holders and visitors. Our processing of data you send us on behalf of your organization is also governed by your Terms of Service.

We collect the following categories of information:

• Account information — your name, email address, hashed password, team role, and subscription tier.
• Service content you submit — API specifications, live traffic samples, drift history, and configuration you send to us so the Service can detect drift.
• Integration data — tokens and identifiers for services you connect, such as GitHub, Slack, Datadog, or Sentry.
• Billing information — subscription status and billing metadata. Card details are collected and stored by Stripe, not by us.
• Usage and device data — log data, IP address, approximate location, and analytics about how the Service is used.

Please do not send us traffic samples or specifications that contain sensitive personal data unless expressly agreed in writing. You control what data you transmit to the Service.

We use information to:

• Provide, operate, and secure the Service, including drift detection, alerts, and auto-fix pull requests.
• Authenticate you, manage your workspace, and enforce plan entitlements and rate limits.
• Process payments and manage subscriptions.
• Send transactional messages such as alerts, invites, and account notices.
• Monitor, debug, and improve the Service and develop new features.
• Comply with legal obligations and enforce our Terms.

Some features generate explanations or suggested fixes using AI models. When you use those features, the relevant specification or drift context may be processed by our AI provider(s) to produce output. We do not use your Customer Data to train third-party foundation models, and we configure providers to process data only to return results to you.

If you are in the EEA or UK, we process personal data on the following bases: performance of a contract (to provide the Service), our legitimate interests (to secure and improve the Service), consent (where required, e.g. certain cookies), and compliance with legal obligations.

We do not sell your personal information. We share information only with service providers (“subprocessors”) that process data on our behalf, with third-party services you choose to connect, and where required to comply with law or protect our rights. We may also transfer information in connection with a merger, acquisition, or sale of assets, subject to this policy.

We rely on the following providers to operate the Service:

We update this list as our infrastructure evolves. Where required, subprocessors are bound by data-processing agreements consistent with applicable law.

We retain account information for as long as your account is active and as needed to provide the Service. Drift-history retention depends on your plan. We may retain limited information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymized. You can request deletion of your account and associated data as described below.

We use administrative, technical, and organizational measures to protect information, including encryption in transit, hashed passwords, scoped API keys, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live (for example under GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to opt out of the “sale” or “sharing” of personal information (we do not sell or share it for cross-context behavioral advertising).

To exercise these rights, use our contact form and choose the privacy topic. We will respond as required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

We use strictly necessary cookies to keep you signed in and to secure the Service, and limited analytics to understand usage. You can control cookies through your browser settings; disabling necessary cookies may prevent you from signing in.

We and our subprocessors may process information in countries other than yours. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers of personal data.

The Service is intended for use by developers and organizations and is not directed to children under 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

For privacy questions or requests, use our contact form. The data controller is AUSPRO PTY LTD (ABN 41 687 962 607), Melbourne, VIC, Australia.