ndoc Privacy Policy
Effective date: October 21, 2026
1. Who we are
ndoc is operated by Dasermo Inc., 16192 Coastal Highway, Lewes, Delaware 19958, United States ("ndoc", "we", "us"). Contact: legal@ndoc.ai.
2. What we collect, and from where
From you: your email address; your name and profile photo, if you add them; content you create, upload, or bring into ndoc, including AI conversations; credentials for data sources you connect; and messages you send us.
From others: your name and email address from a sign-in provider, if you use one, and your email address from other users who share with you or invite you.
Automatically: usage information, such as features used, errors, browser and device type, and approximate location derived from your IP address; and security records, such as sign-in sessions and server logs.
You must give us your email address to have an account. Everything else is optional, though some features need it.
3. Why we use it, and our legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Providing ndoc | Performing our contract with you |
| Keeping ndoc secure and preventing abuse | Legitimate interests: a safe service |
| Understanding and improving ndoc | Legitimate interests: improving ndoc; or consent, where the law requires it |
| Complying with the law | Legal obligation |
4. Cookies and similar technologies
We use cookies and browser storage to keep ndoc working and remember your settings, and, for our own usage analytics, an identifier that expires within 13 months. Where the law requires it, we ask for your consent before storing the analytics identifier. You can withdraw consent at any time on this page.
ndoc does not respond to browser "Do Not Track" signals.
5. Who receives it
- other users, as you or your workspace's administrators share;
- your organization's owners and administrators, for workspaces it runs;
- our service providers: hosting, email delivery, sign-in, AI models, and web search;
- data sources you connect;
- authorities or others, when required by law or to protect rights and safety;
- a successor in a merger, acquisition, or sale of assets.
6. International transfers
We store data in the United States, and some service providers process it in other countries. For transfers from the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision, including the EU-U.S. Data Privacy Framework. Contact us for a copy.
7. Retention
We keep personal information while your account is active and as long as needed for the purposes above, then delete it, except where the law requires us to keep it longer.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to restrict its use, and to withdraw consent at any time without affecting earlier use. To exercise them, contact legal@ndoc.ai. You may also complain to your data protection authority.
You have the right to object at any time to our use of your personal information based on legitimate interests, including usage analytics.
9. Changes
We will post any changes to this policy here, with a new effective date.