Privacy policy

In short

Most tools run in your browser: your files are never sent to us. No account, no advertising cookies, no selling of data.

Data controller

Docyvo — [email protected]

Files processed on your device

Tools marked “Processed on your device” (merge, compress, sign or protect a PDF, image tools, compress a Word document…) run entirely in your browser. Your files never leave your device and we have no access to them.

Files processed on our servers

Some conversions (PDF to Word or Excel, Word to PDF, merging Word documents) use our servers, and the tool says so clearly. The file is sent over an encrypted connection (HTTPS) to a server located in the European Union, processed in an isolated environment, then deleted automatically within one hour at most.

We do not look at your files, do not record their names and never use them for any other purpose (no advertising, no AI training). Legal basis: performing the service you request.

Share links

A shared file is encrypted in your browser (AES-256) before upload. The key is part of the link and is never sent to us: we only store encrypted data we cannot read, deleted automatically after 24 hours.

Technical data

Like any website, our servers receive your IP address and technical information (browser, pages requested). It is used only for security and abuse prevention, and erased from server logs after 14 days at most. Abuse rate limiting only uses a fingerprint of the IP address, renewed every day. Legal basis: our legitimate interest in keeping the service secure.

Audience measurement (Google Analytics)

If you accept in the consent banner, we use Google Analytics 4 to learn which pages and tools are used, so we can improve the site. Google Analytics sets cookies (_ga) and receives browsing data (pages viewed, device type, approximate country); it does not store IP addresses, and the name or content of your files is never sent to it. Google advertising signals are disabled. If you decline, Google Analytics is not loaded at all. Legal basis: your consent, which you can withdraw at any time with the “Manage cookies” link at the bottom of every page.

Cookies and local storage

Docyvo sets no advertising cookies. Google Analytics cookies are only set with your consent; your choice is kept for six months in your browser, then asked again. Your browser also stores, locally, the language and theme (light or dark) you chose; these preferences are not sent to us. Cloudflare may set a technical cookie strictly necessary to protect against bots.

Processors and transfers

We use OVH SAS (hosting, France), Cloudflare, Inc. (content delivery and security) and, only with your consent, Google Ireland Limited (Google Analytics). Cloudflare and Google may process data outside the European Union, under the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses. We never sell or rent any data.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your data. We collect almost no personal data, but you can exercise these rights at any time by writing to [email protected]. You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr) or the authority in your country.

Changes

This policy may change as the service evolves. The date of the last update is shown at the top of this page.