---
document: privacy
updated: 2026-10-14
---
Privacy
This is the privacy agreement for CoralDoc, the knowledge base at app.coraldoc.com (CoralDoc Cloud), and the marketing site at coraldoc.com. It explains what we collect, how we use it, who we share it with, and how to reach us. The terms cover the agreement to use the service. By using CoralDoc Cloud or this site, you agree to this policy and those terms.
The same rules apply wherever the pages are kept. A notice for one connected service, when we publish one, is part of this policy and adds detail for that service only.
If you run CoralDoc on your own server, you operate that copy. People using your server should rely on the privacy policy you publish for it.
Your account
When you create or join an organization on CoralDoc Cloud, we keep:
- Your email address and name.
- Your password, in a form that cannot be read back, if you use a password.
- Which organization you belong to, what you are allowed to do, invitations, and notifications.
- Settings for the organization and its spaces, including where the pages are kept.
A space is a set of pages kept in one place. The pages stay in that place. We do not keep them as our own master copy.
CoralDoc Cloud uses a cookie so you stay signed in. This marketing site does not use advertising cookies. The app may save drafts on your device so you can keep working. Those drafts stay on your device.
Signing in with another service
You can sign in with a password, or with another account when that is offered. When you use another account, we receive the email address and name on it, and whether that service has confirmed the email when it tells us. We use this to sign you in or to create a CoralDoc account.
Signing in does not give CoralDoc the files in that account. We do not keep a lasting sign-in with that service for this purpose.
Your pages
Pages, comments, attachments, and older versions stay where the organization keeps them. We keep a list of those files, including names, titles, and tags, so the space can be shown. Deleting the space deletes that list.
We may keep a temporary copy of a page so it opens faster. A temporary copy is kept for a limited time, usually up to 30 days. The place you connected remains the source of the files.
Search uses the text of pages a person is already allowed to open.
Places you connect
Someone allowed to manage the organization chooses where a space's files live. That may be CoralDoc Cloud, a server you run, or another service. CoralDoc reads and changes those files when a person who is allowed to opens, edits, searches, or shares them.
To reach another service, a person provides a secret, such as a key, or signs in there and chooses a folder. We keep that access with the space and use it only for the place that was chosen. The permission you approve can be wider than the folder you pick. We use it so you can choose the folder, and then to read and write inside that folder, including files CoralDoc creates there. We do not offer a way to browse or change the rest of the account.
We keep that access so the space keeps working for other people in the organization. They sign in to CoralDoc only. They do not receive the access itself. What they can see follows what they are allowed to do in CoralDoc.
We protect the secrets and permissions we store. We do not record them in logs. A log may name the connected account.
Deleting a space removes our copy of that access and the file list. It does not delete the files in the service you connected, and it does not by itself turn off access at that service. You turn that off in the service's own account settings. If the service rejects the access or it expires, the space stays unavailable until someone allowed to change it connects the service again.
How we use information
We use account information and information from connected places to run CoralDoc: to sign you in, to connect a place, and to read, write, search, and organize the pages in a space.
- We do not sell that information. We do not use it for advertising or for decisions about credit, and we do not pass it to advertising networks or data brokers.
- We share it to run those features: with people in your organization as they are allowed, with the companies that host the CoralDoc service you are using, and with an AI service when a person sends page text to AI Writer. We may also share it if the law requires it, to investigate abuse or protect the service, or as part of a merger or sale of the service after notice where the law requires notice.
- People who operate CoralDoc do not read it unless you ask us to look at a specific problem, we need to for security, the law requires it, or it has been combined so that it no longer identifies you.
AI Writer
If someone uses AI Writer on a page, the text they submit can be sent to the AI service the organization has chosen. We send it only for the request they start. We do not send your files to an AI service on their own.
Sharing a page
When sharing is available, a person can create a link that opens one page without a CoralDoc account. Anyone with the link can read that page, and the images and files it shows, until the link is turned off or it expires.
How long we keep it
Account information stays while the account and organization exist. Access to a connected place stays while that space is connected, and is removed when the space is deleted. The file list is removed with the space. Emails already collected by the earlier waitlist form stay until we no longer need them or you ask us to delete them.
Temporary copies of pages are kept for a limited time, usually up to 30 days.
Security
We protect account information and the access we store. Connect a service only if you are allowed to share that account's files with the organization. The permission can reach more than the folder you picked. Anyone who obtained that access could read and change the files it allows.
Service notices
A connected service can require its own description of what CoralDoc does with that service's user data. That description is part of this policy. The notice for Google sign-in and Google Drive is Google user data.
Children
CoralDoc is for organizations and is not directed at children under 13.
Changes
We will update the date at the top of this page when the policy changes. Continued use of CoralDoc Cloud after the new date means the updated policy applies to that use.
Contact
Questions about this policy, or a request to delete waitlist or account data: privacy@coraldoc.com.