Cookie Policy
Important Notice: Final legal review pending — effective from May 15, 2026. This policy describes our deployment of cookies across the DocChat infrastructure.
At DocChat, we believe in complete transparency regarding the data we collect and how we utilize technology to operate our platform. This Cookie Policy explains what cookies are, how we deploy them across our marketing website, Operator Console, and Tenant Portal, and your choices regarding their usage.
1. What Are Cookies?
Cookies are small text files containing strings of alphanumeric characters that are downloaded to your computer, tablet, mobile phone, or other device when you visit a website or use a web application. They are widely used by online service providers to facilitate platform functionality, maintain secure sessions, remember user preferences, and gather reporting metrics.
Cookies can be classified by their lifespan: "Session cookies" are temporary and are erased when you close your browser, while "Persistent cookies" remain on your device for a pre-defined period or until you manually delete them. They can also be classified by their domain: "First-party cookies" are set by DocChat directly, while "Third-party cookies" are set by external service providers integrated into our platform.
2. Why We Use Cookies
As an enterprise B2B SaaS platform handling highly sensitive financial documentation, our primary use of cookies is fundamentally tied to security and authentication. We use cookies to:
- Authenticate your identity when you log into the Operator Console or access a secure document upload link.
- Protect against Cross-Site Request Forgery (CSRF) attacks and other malicious activities.
- Ensure network traffic is routed efficiently across our cloud infrastructure.
- Remember your UI preferences (such as light/dark mode or language selection) so you don't have to re-configure them on every visit.
- Understand how users navigate our interface so we can identify friction points and improve the overall user experience.
3. Types of Cookies We Use
We categorize the cookies deployed on our platform into three distinct groups. Notably, we do NOT use, deploy, or allow any advertising, retargeting, or cross-site tracking cookies. We do not monetize your browsing behavior.
3.1 Strictly Necessary Cookies
These cookies are essential for the core operation of the DocChat platform. Without these cookies, services you have asked for—such as logging into secure areas, completing a document upload, or maintaining the cryptographic state of a transaction—cannot be provided. Because they are strictly necessary for the delivery of the service, you cannot opt out of them.
3.2 Functional Cookies
These cookies allow our platform to remember choices you make and provide enhanced, more personal features. For example, they may be used to remember your preferred dashboard layout or language settings. If you disable these cookies, certain non-essential functionalities of the interface may degrade or require repetitive input.
3.3 Analytics and Performance Cookies
These cookies collect aggregated, anonymized information about how visitors use our platform. They help us understand which pages are visited most often, how long users spend on specific forms, and whether they encounter error messages. This data is used exclusively to improve the performance and usability of the DocChat service.
4. Specific Cookies Table
The following table details the primary first-party and third-party cookies deployed across our infrastructure:
| Cookie Name | Category | Purpose | Duration | Party |
|---|---|---|---|---|
| dc_session | Strictly Necessary | Maintains the authenticated session state for the Tenant Portal (End-Customer upload workflows). | Session | First-party |
| dc_op_session | Strictly Necessary | Maintains the highly secure authenticated session state for the Operator Console. | 12 Hours | First-party |
| csrf_token | Strictly Necessary | Prevents Cross-Site Request Forgery attacks during form submissions and API calls. | Session | First-party |
| dc_theme_pref | Functional | Stores the user's preference for light, dark, or system-default UI themes. | 1 Year | First-party |
| _ga / _ga_* | Analytics | Used by Google Analytics (deployed only on the public marketing site, not within the secure application) to distinguish unique users and measure site performance. Data is anonymized. | Up to 2 Years | Third-party |
5. Third-Party Cookies
As indicated in the table above, the only third-party cookies we currently deploy are associated with anonymized web analytics strictly isolated to our public-facing marketing website (docchat.co). Once a user authenticates and enters the Operator Console or the secure Tenant Portal, these third-party analytics cookies are stripped and are not utilized to track behavior within the secure application environments.
6. How to Manage Cookies
You have the right to decide whether to accept or reject cookies. While strictly necessary cookies cannot be disabled, you can exercise your preferences regarding functional and analytical cookies through several mechanisms:
6.1 Cookie Consent Banner Controls
When you first visit our public marketing website, you will be presented with a cookie consent banner. This interface allows you to opt-in or opt-out of the Analytics and Functional cookie categories. You can revisit this interface at any time by clicking the "Cookie Preferences" link located in the website footer, or you can manage them directly by clicking the button below:
6.2 Browser Settings
Most modern web browsers allow you to control cookies through their settings preferences. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Please note that if you disable or refuse all cookies—including strictly necessary cookies—the DocChat Operator Console and Tenant Portal will fail to function, as secure authentication requires session cookies.
For more information on how to manage cookies via browser settings, please consult the official documentation for your specific browser (e.g., Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge).
7. Cookies and Your Rights Under UAE PDPL
To the extent that any cookie, or combination of cookies, can be used to identify you as an individual, it is treated as personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Our deployment of such cookies is governed by our Privacy Policy, which details your comprehensive rights regarding access, correction, and deletion of personal data.
8. Changes to this Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, or for other operational, legal, or regulatory reasons. We encourage you to review this policy periodically to stay informed about our use of cookies and related technologies.
9. Contact Us
If you have any questions about our use of cookies or other technologies, please contact our privacy team at:
Email: privacy [at] docchat.co
Last Updated: May 15, 2026