Plain EnglishYour data stays yours
Last updated: September 2026
Draft for review. This page explains our intent in plain language; the
Privacy Policy and
Terms of Service are the binding versions and should be reviewed by a lawyer before signing customers.
What we mean
When your company uses DocuCircuit, everything your people put in — the forms you upload, the inspections and reports they complete, photos, signatures, names, and email addresses — belongs to your company. Not to us.
The promises
- We don’t sell it. We never sell, rent, or trade your data, and we never share it for anyone else’s advertising.
- Other customers can’t see it. Each company’s workspace is isolated. Your forms, reports, departments, and people are only visible inside your own organization.
- We don’t reuse it. We don’t copy your forms or reports into a shared library, a template marketplace, or anyone else’s account.
- We only look when we have to. Our team accesses your data to operate and support the service (fix a bug, help with a support request, respond to a legal obligation) — not to browse it.
- You can get it out — yourself, any time. A site admin can download the complete record set (every report, its signature evidence, incidents, defects, and the activity log) as one file from Company Settings. If you leave, you export first, then we delete.
- Signed records can’t be quietly changed. Once a report is finalized it’s locked. A correction becomes a new version; the original is kept. Every signature carries a tamper seal, and the activity log can’t be edited or deleted by anyone — us included.
About the AI assistant
On plans that include the AI assistant, the text of the inspection step being reviewed is sent to our AI provider (Anthropic) to generate suggestions. Anthropic does not use API data to train its models, and that text is never shared with other DocuCircuit customers. On the Standard plan, no data is sent to any AI service — the “used before” suggestions are drawn only from your own company’s past answers.
Where it lives
Data is stored with reputable cloud infrastructure providers in the United States — the full list is at /legal/subprocessors. We use encryption in transit and at rest, scoped access, and per-company data separation.
How long we keep it
Your company picks a retention period (default 5 years). We keep your records at least that long while your account is active. If your company or a court needs records frozen, an account manager can place a legal hold that blocks deletion.
For your compliance team
We’ll sign a Data Processing Agreement. It names us as your processor, lists our sub-processors, and commits us to breach notification and the deletion terms above.
Questions
Email wesleymaupin@gmail.com and we’ll answer plainly.