Privacy Policy
Updated January 24, 2026
cDox is built around a simple idea: your documents are yours. We're not a data company, an advertising company, or an AI company. We're just people trying to build a calm, trustworthy place to write and share documents. This policy explains, in plain language, what we do and don't do with your data.
Where your data lives
All cDox data is stored and processed in Canada on independently owned, Canadian bare metal servers located in Montreal. Your data stays in Canada and is governed by Canadian law. It does not move between countries as part of normal operation or routine backups.
What data we collect
We collect only what's required to run the service:
- Account information, such as your email address or phone number
- Documents and content you choose to create or upload
- Basic operational logs needed to keep the service reliable and secure
We do not collect behavioural tracking data, advertising identifiers, or unnecessary personal information. We're not interested in profiling you or watching how you work.
How we use your data
Your data is used solely to provide and operate cDox. That's it.
We do not read your documents unless you explicitly ask for help and give us permission to look at something specific to provide support. Your content is never used for AI training, machine learning, analytics experiments, or any secondary purpose.
AI and training
To be very clear: your writing is never used to train AI systems. Not now, not later, not in anonymized form, and not as part of "research." We don't do that.
Third parties
We do not sell, rent, or trade your data.
We may use limited service providers for things like infrastructure or email delivery. These providers do not have access to your document contents and are required to meet strict confidentiality and security standards. Where possible, we choose services that support Canadian data residency.
Security
We take reasonable technical and organizational steps to protect your data, including encryption at rest and secure access controls. No system is perfect, but we design cDox to minimize risk and unnecessary exposure.
Data retention and deletion
You can delete documents or your entire account at any time. When you do, your data is permanently removed from our active systems within a reasonable timeframe. We do not keep hidden copies, and we do not retain deleted content for AI training, analytics, or secondary use. Temporary retention may occur only where required for security, legal, or operational integrity.
Changes to this policy
If we make changes to this policy, we'll update this page and revise the effective date. We won't materially change how your data is handled without notice.
Questions
If you have questions about this policy or how your data is handled, please use the contact form linked in the footer, or the help page when you're logged in. cDox operates from Canada and is subject to Canadian law.
We're not lawyers, and we're not trying to hide behind legal language. If something here feels unclear, reach out. We believe transparency works best when people can actually understand it.