Security and privacy

Built with privacy, security, and accountability in mind.

This page explains what the product does today, what information moves through the workflow, and the choices available to customers.

Account access

Passwords are stored as salted, one-way password hashes. Signed session cookies and server-side authorization checks protect account and document routes. Password reset links expire after 30 minutes, work once, and invalidate existing sessions.

Private exports

PDF exports are stored in a private Cloudflare R2 bucket under account-specific keys. Downloads require an authenticated ownership check; files are not placed at public asset URLs.

Card payments

Checkout and card entry are hosted by Stripe. HandleIt Docs stores payment status and Stripe identifiers needed to grant export access, but does not store full card numbers.

Data stored

The service stores account email and authentication data, answers submitted for generation, generated and edited drafts, export records, payment status, support-related suggestions, and limited first-party operational events.

AI processing

Document answers are sent to OpenAI’s API to generate a draft. OpenAI states that API inputs and outputs are not used to train its models by default. Its standard abuse-monitoring logs may retain some content for up to 30 days. HandleIt Docs does not use customer documents to train its own models.

Deletion and retention

Signed-in customers can delete their account from Account settings. This removes saved drafts, sessions, private exports, and marketing subscriptions. Limited payment, fraud-prevention, or operational records may be retained where needed for reconciliation or legal obligations.

Your role

Review before you use a draft.

Do not enter Social Security numbers, bank or card numbers, medical records, court filings, immigration identifiers, or other highly sensitive information.

No internet service can promise absolute security. HandleIt Docs uses security-conscious controls appropriate to the current product while continuing to review its practices as the service grows.

For privacy or security questions, email hello@handleitdocs.com. Support requests are reviewed during normal business days.