Privacy Policy
Last Updated: August 26, 2026
At Document Master (a platform developed and operated by Lucentinian Works Co Ltd), we take your privacy and the confidentiality of your proprietary enterprise documentation extremely seriously. This Privacy Policy describes our practices regarding the collection, storage, encryption, processing, and protection of information when you access or use Document Master, particularly when integrating third-party storage providers such as Google Drive and Dropbox, and cloud AI services such as Google Gemini.
1. Information We Collect
To deliver our multi-tenant document indexing, access-controlled document retrieval, and Retrieval-Augmented Generation (RAG) assistant services, we process the following categories of information:
- Account & Authentication Identity: When you register or sign in using email/password or Google Sign-In, we store your email address, language preferences, cryptographic password hashes, and your unique Google user identifier (
google_id). - OAuth Authorization Tokens: When you connect third-party document sources (Google Drive, Dropbox, Jira, Confluence) or LLM accounts, we securely store encrypted OAuth access tokens and offline refresh tokens using envelope encryption tied to a Key Management Service (KMS).
- Document Metadata & Ephemeral Text: Document metadata (file paths, file sizes, modification timestamps, content hashes) is stored to track indexing states. File content is processed in transient memory to generate vectorized chunks and summaries.
- Audit & Interaction Logs: To provide enterprise compliance, search queries submitted by external auditors and staff are logged with timestamps and IP addresses for workspace administrator oversight.
2. Compliance with Google API User Data Policy & Limited Use
Document Master's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:
- Authentication Scopes (
.../auth/userinfo.email,.../auth/userinfo.profile): Used solely to verify user identity, create user accounts, and maintain secure authenticated sessions. - Google Drive Read-Only Scope (
.../auth/drive.readonly): Used exclusively to list and download the documents within folders explicitly chosen by the workspace administrator for indexing. - Google Drive Storage Scope (
.../auth/drive/.../auth/drive.file): Used only when Google Drive is designated as your workspace's Remote Index Storage location to write, update, and manage encrypted index files. - Generative Language Scope (
.../auth/generative-language.retriever): Used to list Gemini models and perform conversational completions for authorized workspace queries. - No Advertising or Commercial Resale: We never sell your Google user data, document contents, or query history to third parties, nor do we use it for advertising or surveillance purposes.
- No AI Model Retraining: Data retrieved from your Google Drive files or Google accounts is not used to train or fine-tune general third-party artificial intelligence models.
3. Dropbox API Integration & Enterprise Security
When connecting Dropbox as a document source or remote index storage provider:
- File & Metadata Access: We access only the designated folders selected by the administrator to index enterprise documentation.
- Enterprise Scalability: Designed to seamlessly support enterprise teams with 50+ concurrent users per tenant with strict role-based access isolation.
- Token Management: Offline refresh tokens are stored encrypted using KMS-backed AES-256 envelope encryption.
4. Zero-Local-Footprint Architecture & Workspace AES-256-GCM Encryption
To ensure utmost data sovereignty, no document indices, summaries, or vector embeddings are stored locally on our application servers. All index files are encrypted using an isolated, per-workspace AES-256-GCM symmetric key before being uploaded directly to your own configured remote storage (Google Drive, Dropbox, FTP, or decentralized storage). Even if a remote storage provider is compromised, index files cannot be deciphered without the workspace's secret encryption key.
5. Data Retention, Control & Deletion
Workspace administrators have full control over all stored data. When a document source or workspace is disconnected or deleted, all associated remote index files are purged, and all stored tokens are permanently removed from our databases. Users can request complete account deletion at any time.
6. Contact Us
If you have any questions or data protection inquiries, please contact our Data Protection Officer at lucentinian.com or via email at privacy@lucentinian.com.