Privacy Policy

1. Introduction

Tiny Town Software, LLC is the data controller for DocPigeon. This Privacy Policy describes how we handle your personal information.

2. We never sell your personal information. Ever.

That is our promise. We do not sell or rent your personal information to advertisers or to anyone else. Period.

3. What we collect

• Account & identity: your name, email address, and business information.
• Payment metadata: processed via a payment provider. We do not store card numbers.
• Recipient delivery data: the names, addresses, phone numbers, and emails needed to send your messages.
• Your documents & content: the files and content you upload to use the Service.
• Usage & technical data: logs and diagnostics needed to operate and secure the Service.
• Device identifiers & push notification tokens: on our mobile apps, a device identifier and (if you enable notifications) a push token, used to keep you signed in on that device and to deliver alerts like a campaign finishing or a low balance.

4. Why we use it

We use your information to provide and operate the Service, deliver your messages, bill you, ensure security and prevent abuse, and comply with the law. Our legal bases include performing our contract with you and our legitimate interests in operating the Service.

5. How we share it

We share your information only as needed to operate the Service:

• Payment processing — handled by our payment provider.
• Delivery providers — email, SMS, mail, and fax providers.
• Hosting / infrastructure providers — to host and run the Service.

Subprocessors are bound to protect your data. We do not sell or rent your data. We may disclose information where required by law.

6. Retention

We keep personal data as long as your account and delivery records are needed to provide the Service or as the law requires. We will delete personal data on request where applicable.

7. Security

We use encryption in transit, access controls, and industry-typical safeguards to protect your information.

8. Your rights

You have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, to request portability, and to withdraw consent. California residents (CCPA/CPRA) have the right to know, to delete, and to opt out of the sale of personal information — since we do not sell personal information, no sale opt-out is needed.

Deleting your account: you can delete your own account and its data yourself, in-app, at any time — no need to contact anyone. Go to Account → Manage → Personal Data → "Delete data and close my account." If you're the only person on your team's account, this removes your login and all of that account's data (recipients, documents, templates, campaigns, and everything else tied to it); if you share the account with teammates, only your own login is removed and the account continues for them. For anything this self-service option doesn't cover, contact us at support@docpigeon.com.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Cookies / analytics

We use minimal cookies for authentication and security. We do not currently use any third-party analytics cookies beyond these essential ones. If that changes, we will update this policy.

11. Changes

We may update this Privacy Policy from time to time. Changes will be posted here with a revised effective date.

12. Contact

Questions about this policy? Contact us at support@docpigeon.com.