Privacy Policy

Scope and roles

Docvera provides case management, deadline tracking, document collection, client portal access, and related communications for immigration practices. In most cases, the firm or consultant using Docvera decides what client information is collected and how it is used in practice.

If you are a client of a firm using Docvera and want to access, correct, or delete information in a case file, you should contact your consultant or firm first.

Information we collect or process

• Account and workspace information such as names, email addresses, user IDs, tenant records, invitation records, and plan status.
• Case and client information entered by users, such as client names, contact details, case type, deadlines, notes, and checklist items.
• Documents uploaded to the platform, file metadata, sharing settings, and upload or download events.
• Communication metadata such as email delivery attempts, WhatsApp delivery status, message type, timestamps, and related case or tenant references.
• Technical and security information such as request data, authentication events, browser information, and application logs.

How we use information

We do not sell case or client data, and we do not use case or document content for advertising.

• Operate and secure the Docvera service.
• Authenticate users and provide workspace or client portal access.
• Deliver invitations, updates, document notifications, and deadline reminders.
• Maintain records needed for troubleshooting, abuse prevention, support, and legal compliance.

Communications and client portal access

Docvera sends transactional emails and, where enabled, outbound WhatsApp notifications. These messages may include secure access links to the client portal.

Users are responsible for sending client communications only to accurate contact details and for using the platform in a manner that complies with their legal and professional obligations.

Third-party service providers

• Clerk for authentication and account management.
• Amazon Web Services for document storage and related cloud infrastructure.
• Neon for managed PostgreSQL database hosting.
• Vercel for hosting, deployment, and application delivery.
• Resend for transactional email delivery.
• Twilio and WhatsApp for outbound WhatsApp delivery.
• Calendly when you choose to book a demo from our public site.
• Vercel Analytics for high-level website usage analytics, if enabled.

Cross-border processing

Depending on the services used, information may be stored or processed in Canada, the United States, or other jurisdictions used by our service providers.

Retention and deletion

We retain information for as long as needed to provide the service, maintain reasonable business and security records, comply with legal obligations, resolve disputes, and enforce agreements.

Some records, such as logs, audit-related events, and backup data, may persist for a period after active deletion requests.

Security

We use administrative, technical, and organizational measures designed to protect information handled through Docvera. No system is completely secure, and we cannot guarantee absolute security or uninterrupted availability.

Your choices and rights

Subject to applicable law, you may have rights to request access, correction, deletion, or restriction relating to personal information.

Changes and contact

We may update this policy from time to time. Questions can be sent to support@docvera.app.