Privacy Policy
This Privacy Policy explains how MRSLM Group LLC, a Florida limited liability company ("we", "us"), collects, uses and shares personal data when you visit docsalive.com (the "website") or use DocsAlive (the "Service"). We wrote it to match how our software actually behaves today. If that changes, we'll update this page first.
Summary
- The website sets no cookies and loads no analytics, advertising or third-party scripts.
- We don't keep your source code. Repository checkouts are deleted when each run finishes.
- Docs Health Check reports are kept for up to 90 days, then deleted automatically.
- AI fix drafting is off by default. Only when it's enabled do we send limited snippets to an AI model provider.
- We do not sell or share personal data for cross-context behavioral advertising.
Information we collect
| Source | What | Why |
|---|---|---|
| Website visits | Standard web-server logs kept by our hosting provider: IP address, browser user agent, page requested, time. | Delivering and securing the website. |
| Your address and whatever you write to us, at hello@docsalive.com, security@docsalive.com or legal@docsalive.com. | Responding to you. | |
| Docs Health Check | The repository URL you submit and the generated report. Reports contain the page names, outcomes and short excerpts (up to 700 characters) of error output. Application server logs record your IP address and the request. | Running the check and showing you the report. |
| GitHub App (when installed) | Installation details GitHub sends us (account or organization name, installation ID, repositories you grant access to), webhook events, and the code and docs we check out to run. | Running checks and posting results to your pull requests. |
| Accounts and billing (paid plans) | Name, email, company, plan, and billing status. Card details are collected by our payment processor and are never stored on our servers. | Providing and billing for the Service. |
| Agreement records | When you check "I agree" at checkout or before a Docs Health Check: the Terms version, the date and time, your email (checkout only), the plan, your IP address and browser user agent. | Proving the agreement and preventing fraud. |
| AI fix drafting (only if enabled) | For a failing example: the page text (up to 16,000 characters), the failing code (up to 2,000), error output (up to 2,000) and short context. | Drafting a suggested fix. |
Customer Content (code and docs) may happen to contain personal data, such as author names in commit metadata. We process it only to provide the Service.
How we use information
We use information to:
- provide, operate, maintain and secure the Service and website;
- run the checks you request and return results;
- communicate with you and provide support;
- bill for paid plans;
- detect and prevent abuse; and
- comply with legal obligations.
We don't use Customer Content to train machine-learning models, and we don't sell personal data.
Legal bases (EEA/UK)
If the GDPR or UK GDPR applies, we rely on these legal bases:
- Contract, to provide the Service you request.
- Legitimate interests, to secure the website and Service, prevent abuse and improve reliability.
- Legal obligation, for tax and accounting.
- Consent, where we ask for it.
You can withdraw consent at any time.
Retention
- Repository checkouts: deleted at the end of each run.
- Docs Health Check reports: deleted automatically after 90 days, along with the related dashboard entry.
- Web-server and application logs: kept by our hosting providers under their standard retention. We aim not to keep them longer than needed for security and troubleshooting.
- Agreement records: kept for the life of the account and afterwards as long as needed to establish, exercise or defend legal claims.
- Account and billing records: kept while your account is active and afterwards as required for tax, accounting and legal purposes.
- Email: kept as long as needed to handle your request and any follow-up.
Retention periods and response times on this page are operational targets that describe how our systems are designed to work. They don't limit any rights you have under applicable law.
Service providers (subprocessors)
We share personal data only with providers that help us run the Service, under contracts that limit their use of it:
| Provider | Purpose | When |
|---|---|---|
| Hostinger | Website hosting and server logs | Visiting the website |
| Stripe | Payment processing | Paid plans |
| GitHub | Source-code hosting and integration | If you install our GitHub App or submit a GitHub repository |
| AI model provider (named in your account settings before use) | Drafting suggested fixes | Only if AI fix drafting is enabled |
| Application hosting provider (to be listed here before the hosted Service launches) | Running checks and storing reports | Hosted Service |
We may also disclose information when required by law, to protect rights and safety, or as part of a merger, acquisition or sale of assets. We'll update this list before adding a new subprocessor.
International transfers
We are based in the United States, and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Security
We use technical and organizational measures described on our Security page. These include isolated execution, encryption in transit and least-privilege access. No method of transmission or storage is completely secure, and we can't guarantee absolute security.
Your rights: EEA, UK and similar laws
Depending on where you live, you may have the right to:
- access, correct or delete your personal data;
- object to or restrict our processing of it;
- receive a portable copy; and
- withdraw consent.
You may also lodge a complaint with your local data protection authority. To exercise these rights, email legal@docsalive.com. We aim to respond within one month, as the GDPR requires.
Your rights: California (CCPA/CPRA)
If you're a California resident, you have the right to:
- know the categories and specific pieces of personal information we collect, the sources, the purposes and the categories of recipients (described above);
- delete personal information we hold about you, subject to legal exceptions;
- correct inaccurate personal information;
- opt out of the sale or sharing of personal information. We don't sell or share personal information, as those terms are defined in the CCPA, and haven't done so in the past 12 months;
- limit the use of sensitive personal information. We don't collect sensitive personal information for purposes that would trigger this right; and
- not be discriminated against for exercising any of these rights.
Categories collected in the past 12 months: identifiers (such as IP address and email address), commercial information (plan and billing status) and internet activity (server logs).
To make a request, email legal@docsalive.com. We'll verify your request by confirming control of the email address associated with the data, and may ask for more information where needed. You may use an authorized agent. We may ask for proof of the agent's authorization and verify your identity directly. We aim to respond within 45 days, as the law requires.
Other U.S. states
Residents of other U.S. states with privacy laws may have similar rights. Use the same contact to make a request. If we deny your request, you may appeal by replying to our decision with the subject "Appeal".
Changes
We'll post updates here and change the version and "last updated" date. If the changes are material, we'll make reasonable efforts to notify account holders.
Contact
MRSLM Group LLC
7095 Hollywood Blvd Ste 484, Los Angeles, CA 90028, United States
Email: legal@docsalive.com