Cookie Policy

1. Scope

This policy describes cookies and browser storage used by the DocuChat marketing site, authenticated app, and customer-embedded chat surfaces. These surfaces use different storage for different purposes.

2. Current marketing-site state

The production marketing site does not currently have Google Tag Manager or Google Analytics configured or active. It therefore does not currently set Google Analytics _ga or _ga_* cookies through DocuChat's marketing configuration.

The marketing site uses native consent controls. The first-party dc_consent local-storage entry records consent categories, a consent-policy version, and a timestamp so the site can remember the visitor's choice. It is strictly necessary for managing that choice.

3. Current browser-storage inventory

| Surface and item | Purpose | Category | Current duration | | --- | --- | --- | --- | | Marketing site: dc_consent in local storage | Remembers the visitor's consent categories, version, and timestamp | Strictly necessary | Persistent until changed, cleared by the browser or user, or replaced by a later consent version | | Authenticated app: authentication session and token storage managed by the app's authentication tooling | Keeps a signed-in user authenticated and supports account security | Strictly necessary | Controlled by session and token configuration, sign-out, expiry, and browser clearing | | Embedded widget: separate visitor session identifier stored using a cookie and/or local storage | Maintains a chatbot visitor session and associates messages with that session | Strictly necessary for the chat session | Current implementation uses a rolling duration of about 30 days |

Browser, provider, and customer-site technologies may create additional strictly necessary storage for security, networking, or the customer's own site. The embedding customer is responsible for its own inventory and notice.

4. Consent categories and future activation

The marketing site's native controls support strictly necessary, functional, analytics, and marketing categories. Strictly necessary storage remains active. Optional categories do not mean a corresponding technology is currently active.

Before DocuChat activates GTM, Google Analytics, or another optional marketing technology on the production marketing site, we will review this policy and the consent configuration. Optional technology will be loaded only after the applicable consent choice where law requires it.

Visitors can change the marketing-site choice using the Cookie preferences control in the footer. A changed choice governs future loading by the marketing site. We do not promise that changing a choice automatically deletes data already stored by a browser, customer site, or third party; browser controls may also be needed.

5. Widgets, embeds, and customer analytics

Widget storage and analytics are separate from the marketing site's dc_consent choice. The widget does not include its own visitor-consent banner. Optional customer-page analytics may be configured for the floating widget; inline iframe embeds do not forward analytics events to the parent page.

Before enabling optional widget analytics, the embedding customer or website owner is responsible for providing any visitor notice and obtaining any consent required for its site. This does not shift obligations that applicable law places directly and unavoidably on Trouvaillesys.

6. Browser controls and contact

You can clear or block cookies and local storage through browser controls. Blocking strictly necessary storage may prevent sign-in, consent preferences, or chatbot sessions from working as intended.

Questions: admin@docuchat.in. Related data practices are described in the Privacy Policy.