Last updated: 4 July 2026
By using our Services, you are agreeing to these terms and conditions. Please read them carefully.
1. Introduction
Welcome to Docupath AI. By using our services, you acknowledge and agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. Please read them carefully before proceeding to understand how we process your information.
2. Acceptance of Terms
By creating an Account and using our services, you agree to these Terms and our Privacy Policy. If you do not agree, please do not use our services.
3. User Data and Privacy
3.1 Data Collection
We collect personal data provided by you or specifically enabled access to by you when signing up for our services including without limitation to your name, email addresses, and payment information. Additionally, we may collect data about your usage of our services, including IP addresses, device information, and your activity with our services including interactions with Docupath AI.
3.2 Use of Data
The data we collect is used to:
- Provide and improve our services.
- Process payments and manage your subscription.
- Communicate with you, including sending you updates and promotional materials (with your consent).
- Ensure the security of our services.
3.3 Legal Basis for Data Processing
Our legal basis for collecting and using your personal data depends on the specific context in which we collect it. We will process your personal data only when:
- You have given us consent to do so.
- The processing is necessary for the performance of a contract with you.
- The processing is necessary for compliance with a legal obligation.
- The processing is in our legitimate interests and not overridden by your rights.
The Terms and Privacy Policy governing Docupath AI is GDPR compliant. Docupath AI further provides you with the following rights:
- Right to Access: You can request access to your personal data.
- Right to Rectification: You can request correction of inaccurate data.
- Right to Erasure: You can request the deletion of your data.
- Right to Restrict Processing: You can request restrictions on the processing of your data.
- Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your data in certain circumstances.
- Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw it at any time.
To exercise these rights, please contact us at admin@docupath.ai. Kindly note that the nature and exercise of some of these rights and response timeframe may vary depending on the reasonableness of such request and extenuating circumstances.
3.4 Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which collection has been done as more fully described herein was collected, and no unauthorized disclosure shall be made of such data retained save and except with your consent or any legal or regulatory reporting requirements.
3.5 Data Sharing
We do not share your personal data with third parties, except:
- When required by law.
- With external service providers who process data on our behalf or aid in the furtherance of Docupath AI services under strict confidentiality agreements.
- To protect the rights, property, or safety of Docupath AI, our users, or others.
3.6 International Data Transfers
Your data may be transferred to and processed in countries outside of your country of residence, including countries that may have different data protection laws. If you are located in the EEA, we will ensure that your data is transferred in compliance with GDPR by using approved contractual clauses or other appropriate safeguards.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our platform, for analytics, and to deliver targeted advertisements. You can manage your cookie preferences through your browser settings or our cookie consent tool. For full details, see our Cookie Policy.
5. Changes to These Terms and Privacy Policy
We may update these Terms and our Privacy Policy from time to time. We will notify you of any significant changes by posting the new terms on our platform and, if applicable, via email.
6. Contact Information
If you have any questions or concerns about these Terms or our Privacy Policy, please contact us at:
Docupath IT Consultancies FZCO
Dubai Silicon Oasis, DDP, Building A1, Dubai, United Arab Emirates
admin@docupath.ai
Last updated: 4 July 2026 (Version 1.2)
We use cookies and similar tracking technologies to enhance your experience on our platform, for analytics, and to deliver targeted advertisements. You can manage your cookie preferences through your browser settings or our cookie consent tool.
1. What Are Cookies?
Cookies are small text files placed on your device (computer, smartphone, tablet) when you visit a website. They enable features like user authentication, session management, and usage tracking.
2. Why We Use Cookies
We use cookies to:
- Operate our platform: Support essential functionality such as user authentication, session continuity, and identifying the user's subscribed package.
- Analyse performance: Use Google Analytics and HubSpot to understand user behaviour in aggregate and improve platform performance and reliability.
- Deliver targeted advertisements: Serve relevant ads via Google Ads and LinkedIn Ads based on your browsing behaviour and interests.
- Save user preferences: Store personalization settings such as your organisation logo, name, and role to tailor your experience.
- Provide in-app support: Use Intercom to deliver real-time customer support chat, product update notifications, and in-app messaging.
3. Third-Party Cookies
We use third-party services that may set their own cookies:
- Google Analytics (analytics.google.com): For usage insights and aggregate behaviour tracking.
- Google Ads (ads.google.com): To serve targeted advertisements and measure ad performance.
- LinkedIn Ads (linkedin.com): To serve targeted advertisements to relevant professional audiences and measure campaign effectiveness.
- Headway App (headwayapp.co): To display product update notifications in-app.
- Intercom (intercom.com): To provide in-app customer support chat, product messaging, and visitor identification.
- HubSpot (hubspot.com): To track visitor behaviour, manage marketing analytics, and deliver personalised content and forms.
- Google Search Console: Tracking where visitors click.
- Google Tag Manager: Container system for Google Analytics, Search Console and LinkedIn Ads.
These third parties are contractually bound to adhere to data protection laws such as GDPR.
4. Your Choices and Control
- Consent Banner: On your first visit, you will see a banner allowing you to accept or reject non-essential cookies (e.g., analytics cookies).
- Browser Settings: You may block or delete cookies via browser settings.
- Analytics Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.
- Advertising Opt-Out: You can opt out of Google personalised ads via Google's Ad Settings (adssettings.google.com) and opt out of LinkedIn personalised ads via LinkedIn's Ad Preferences in your account settings.
- Intercom Opt-Out: You can opt out of Intercom's in-app messaging and tracking by contacting us at support@docupath.ai or adjusting your browser settings to block third-party cookies.
Note: Blocking essential cookies will prevent you from logging in or using our services, as cookies are required for authentication and access control.
5. Types of Cookies We Use
5.1 Strictly Necessary Cookies
| Cookie Name | Purpose | Domain | Legal Basis | Expiry |
|---|---|---|---|---|
| _cfuvid | Belongs to Webflow's Cloudflare | docupath.ai | Contractual Necessity | Session |
| auth0Id, auth0Connection | Manage user authentication and secure login sessions | docupath.app | Contractual Necessity | Session |
| Access, Action Permission, Token, RefreshToken | User access and session management | docupath.app | Contractual Necessity | Up to 7 days |
| __hssrc | HubSpot session restore flag — detects if the user's browser has been restarted to ensure analytics session continuity | docupath.ai | Contractual Necessity | Session |
| _GRECAPTCHA | Google reCAPTCHA bot protection — distinguishes human users from automated traffic to protect site forms | google.com | Contractual Necessity | Up to 6 months |
| __cf_bm | Cloudflare Bot Management — identifies and manages automated bot traffic on HubSpot-hosted scripts | .hubspot.com / .hs-scripts.com | Contractual Necessity | 30 minutes |
| csrf.app | HubSpot CSRF (Cross-Site Request Forgery) token — prevents cross-site request forgery attacks on HubSpot forms | .hubspot.com | Contractual Necessity | Up to 1 year |
| isLowCredit | Indicates whether the user's account has low credit — used to control access to features requiring sufficient credit balance | docupath.app | Contractual Necessity | Session |
| tenantPin | Tenant-specific PIN for user authentication and session scoping — ties the session to the correct organisational tenant | docupath.app | Contractual Necessity | Up to 7 days |
5.2 Analytics & Personalization Cookies (Consent Required)
| Cookie Name | Purpose | Provider | Legal Basis | Expiry |
|---|---|---|---|---|
| _ga, _gid, _gat | Aggregate user behaviour analysis | Google Analytics | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
| orgLogo, orgName, userEmail, userId, userName, userRoleId, packageId | Personalisation cookies | docupath.app | Consent (GDPR Art. 6(1)(a)) | Does not Expire |
| snitcher_device_id | B2B visitor identification — identifies the company visiting the site to enable sales intelligence and account-based insights | Snitcher | Consent (GDPR Art. 6(1)(a)) | Session |
| __hstc | HubSpot tracking cookie — tracks a visitor across sessions, recording the number of visits and timestamps for analytics purposes | HubSpot | Consent (GDPR Art. 6(1)(a)) | Up to 13 months |
| _ga_C87XCXRCV2 | Google Analytics 4 measurement container — stores and counts page views for GA4 event-based analytics | Google Analytics | Consent (GDPR Art. 6(1)(a)) | Up to 2 years |
| _cq_duid, _cq_session | HubSpot contact and session identifiers — track individual visitor sessions and persistent device identity for analytics and personalisation | HubSpot | Consent (GDPR Art. 6(1)(a)) | 3 months / 1 year |
| _hjSessionUser_204526, _hjSessionUser_35118 | Hotjar user session persistence — ensures a consistent user ID is maintained across pages during a session for behavioural analytics | HubSpot | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
| AnalyticsSyncHistory, UserMatchHistory | LinkedIn analytics sync — stores information about synced LinkedIn audiences and match history for campaign measurement | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
5.3 Third-Party Functional Cookies
| Cookie Name | Purpose | Provider | Legal Basis | Expiry |
|---|---|---|---|---|
| Headway Cookies | Notify users of product updates | Headway App | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
| intercom-device-id-* | Intercom device identifier — distinguishes individual devices for in-app messaging and support chat continuity | Intercom | Consent (GDPR Art. 6(1)(a)) | Up to 9 months |
| intercom-id-* | Intercom visitor ID — assigns a unique identifier to each visitor to maintain chat history and user recognition across sessions | Intercom | Consent (GDPR Art. 6(1)(a)) | Up to 9 months |
| intercom-session-* | Intercom session token — manages the active in-app messaging session and ensures seamless support chat continuity | Intercom | Consent (GDPR Art. 6(1)(a)) | Session |
5.4 Advertising Cookies (Consent Required)
| Cookie Name | Purpose | Provider | Legal Basis | Expiry |
|---|---|---|---|---|
| _gcl_au, _gads, _gac_* | Ad performance and conversion tracking | Google Ads | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
| UserMatchHistory, AnalyticsSyncHistory, li_sugr | LinkedIn audience matching and ad targeting | LinkedIn Ads | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
| bcookie, bscookie, lidc | LinkedIn browser ID and ad delivery security | LinkedIn Ads | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
| IDE | Google DoubleClick ad targeting — identifies users across sites for frequency capping, personalised ads, and conversion attribution | Google (DoubleClick) | Consent (GDPR Art. 6(1)(a)) | Up to 1 year |
| NID | Google ad personalisation and reCAPTCHA — stores user preferences and session tokens for personalised Google advertising and anti-abuse protection | Consent (GDPR Art. 6(1)(a)) | Up to 6 months | |
| ar_debug | Google/DoubleClick ad debug — used during development and testing to verify ad tag firing and conversion tracking accuracy | Google (DoubleClick) | Consent (GDPR Art. 6(1)(a)) | Up to 2 days |
6. Legal Basis for Use of Cookies
Under GDPR and the ePrivacy Directive:
- Strictly Necessary Cookies are used under contractual necessity (Art. 6(1)(b) of GDPR). These cookies do not require your consent as they are essential for the platform to function.
- Analytics cookies (Google Analytics, HubSpot) are used only with your explicit consent (Art. 6(1)(a) of GDPR). You can withdraw consent at any time via cookie settings or browser tools.
- Advertising cookies (Google Ads, LinkedIn Ads) are used only with your explicit consent (Art. 6(1)(a) of GDPR). These cookies enable us to serve targeted advertisements and measure campaign performance. You may withdraw consent at any time.
- Personalisation cookies are used only with your explicit consent (Art. 6(1)(a) of GDPR). These cookies store preferences such as your organisation name, role, and logo to personalise your experience.
- Functional cookies (Headway App) are used only with your explicit consent (Art. 6(1)(a) of GDPR), in accordance with ePrivacy Directive requirements for non-essential cookies. You can withdraw consent at any time via cookie settings.
- Functional cookies (Intercom) are used only with your explicit consent (Art. 6(1)(a) of GDPR). These cookies enable in-app customer support chat, product messaging, and visitor identification. You can withdraw consent at any time via cookie settings or by contacting us at support@docupath.ai.
7. Data Retention
We retain cookie-related data for no longer than is necessary for the purpose for which it was collected, subject to the following criteria:
- Strictly necessary cookies: Retained for the duration of your session or login period only and deleted on logout or browser close.
- Analytics cookies (Google Analytics, HubSpot): Retained for a maximum of 13 months from the date of collection, in line with the cookie-specific expiry periods set out in Section 5.
- Advertising cookies (Google Ads, LinkedIn Ads): Retained for a maximum of 12 months from the date of collection.
- Personalisation and functional cookies: Retained for up to 1 year or until you withdraw consent, whichever is earlier.
- Intercom functional cookies: Retained for up to 9 months from the date of collection, or for the duration of a session in the case of session-only cookies, in line with the cookie-specific expiry periods set out in Section 5.
8. Updates to This Policy
We may update this Cookie Policy to reflect changes in our practices, technology, or applicable laws. Any updates will be posted here, and we may notify you by email or in-app message where appropriate.
9. Contact Us
For questions about our use of cookies or to exercise your data rights, contact: support@docupath.ai