DocScan Privacy Policy

Last updated: November 4, 2026

DocScan is operated by Wealth Street Services Inc. (“Wealth Street”, “we”, “us” or “our”). This policy explains how personal information is handled when you use the DocScan mobile app and its related account services.

Scans you save in DocScan are stored on your device by default. Creating an account does not automatically upload your scans to us or create a cloud backup. We receive document contents when you choose to send documents to Wealth Street through an available sharing feature, or provide them to us through another channel.

1. Information we handle

Account information. When you register, we collect your name, email address, phone number and country. We also maintain an account identifier, account and engagement status, email-verification status, and account creation and update dates. Your password is stored as a password hash, rather than as a readable password. We process authentication tokens, temporary verification and password-reset codes, and security records to protect access to your account.

Documents stored on your device. These include scanned or imported images, document names, page counts, folders, categories, and related information you save in the app. Scanning and image processing take place using your device and its native scanning tools. Local document information is associated with your DocScan account on that device. Signing out keeps it for your next sign-in; another account signing in through the app does not see those local documents.

Information you choose to send to Wealth Street. If you submit an accounting enquiry, we receive the details you enter, such as your contact information, personal or business service needs, business name and number if provided, relevant tax years, deadlines, estimated document volume, notes and consent. If you use Send to Wealth Street or respond to a document request, we receive the document files you send and associated details, such as title, category, tax year, page count and submission status. These documents may contain sensitive financial, tax, health or identity information. We also maintain related requests, checklists and service-status records.

Notifications and communications. If you allow notifications, we collect a push-notification token associated with your device and account. We process messages you send to support and emails needed to operate your account, including verification and password-reset emails.

Technical and security information. Our servers and service providers may process IP addresses, request times, network and device or app information, requested resources, and error or security logs when the app connects to account services, downloads app updates, or delivers notifications. This information supports delivery, troubleshooting, security and abuse prevention.

2. How we use information

We use the information described above to:

  • Create and manage your account, authenticate you, verify email addresses and help you recover access.
  • Let you scan, organize, find and export documents, and keep local documents associated with the appropriate account.
  • Respond to enquiries and provide accounting services or document workflows you request.
  • Deliver service communications, document requests, notifications and app updates.
  • Maintain and troubleshoot the app, prevent fraud and misuse, and protect accounts and systems.
  • Respond to privacy requests and meet applicable legal or professional obligations.

Providing the required account information is necessary to create an account. Accounting enquiries, sending documents, photo imports and notifications are separate choices. Canadian accounts are offered email verification; an unverified Canadian account can still use the app.

3. Local storage, backups and exports

DocScan does not provide automatic document cloud backup or automatic synchronization of your local scan library between devices. We cannot retrieve local-only scans from our servers if your device is lost, damaged, reset or cleared.

Your phone’s operating system, device-backup settings or other apps may separately back up or copy app data. Such backups are controlled by those services and your device settings, rather than by a DocScan cloud-backup feature.

When you export a document or use your device’s share menu, the file is provided to the app, service or person you select. For example, you may choose email, a cloud drive, messaging or a printer. Those recipients handle the copy under their own practices. Deleting the document or account in DocScan does not recall exported copies.

4. When information is disclosed

Your choices. We receive the information you submit to Wealth Street and disclose exported copies to the destinations you select. Local-only scan contents are not automatically sent to Wealth Street.

Our team and service providers. Wealth Street staff who handle your enquiry or services may access the information you send. We use Vercel for application hosting and storage of documents sent to the firm, a hosted MongoDB database for account and service records, Google Workspace/Gmail for account email, and Expo with Apple or Google services for updates and notifications. These providers process the information needed for their respective functions. A notification may include a document-request message and may appear on your lock screen, depending on your settings.

Links to documents sent to the firm. In the current version, uploaded documents are stored at unique, publicly accessible file URLs. Anyone who obtains a file URL may be able to open the file without signing in. Treat those URLs as confidential. This does not apply to scans that remain only on your device.

External accounting checkout. If you choose an accounting-service checkout link, it opens an external Zoho Billing page. Details you enter there, including payment information, are handled by Zoho and its payment providers under their terms and privacy notices. DocScan does not collect your full payment-card number through its own screens. This is separate from document scanning; the current app does not offer a DocScan Pro subscription.

Legal requirements. We may disclose information where required or permitted by applicable law, including to respond to valid legal process, protect rights or safety, or investigate fraud. Any use of information for tax filing or other professional services is also governed by the relevant service engagement and authorizations.

We do not sell or rent your personal information. We do not use your scan contents for advertising or send them to generative AI services. The current mobile app does not include advertising or behavioural advertising-tracking SDKs.

5. Processing outside Canada

Some of our service providers operate internationally. Information sent to our services may be stored or processed in Canada, the United States or other countries where those providers operate. Information processed outside Canada may be subject to the laws of that country, including lawful access by its authorities. Contact us for information about our service providers and processing arrangements. Local-only scans remain on your device unless you or a device or backup service copy or transmit them as described above.

6. Permissions and your choices

  • Camera: Used when you choose to capture a document. If permission is denied, camera scanning is unavailable.
  • Photos: Used to import images you select. The operating system may provide access only to selected photos, depending on your settings.
  • Notifications: Optional. You can decline them or turn them off in device settings; you can still check requests in the app.

The current app does not request your contacts, precise location or microphone for document scanning. You can change permissions in your device settings. You may decline to submit an accounting enquiry or send documents to the firm and continue using the app’s local document functions. We do not send documents to Wealth Street merely because you scan them.

You can ask us to stop an optional use of your personal information or withdraw consent by contacting us. This may affect services that require that information and does not affect processing already completed or information we must retain by law.

7. Retention and deletion

Local documents. Local documents remain on the device until their app data or files are removed. Signing out does not delete them. Deleting an individual document removes it from your document library, but exported copies, cached files or device backups may remain. To clear this account’s local files and metadata on the current device, use the in-app account-deletion option. If local cleanup fails, the app tells you. Clearing the app’s storage or uninstalling it can also remove local app data and may affect every DocScan account used on that device; device backups and exported copies must be managed separately.

App account and service records. We retain account information while your account is active and as needed to provide requested services. Successful account deletion removes your account and associated document, enquiry, request, checklist and tax-workflow records from the app’s active systems, including files uploaded through those app features. It also prevents further sign-in using that account.

Security and email records. Verification and password-reset codes expire after 10 minutes. An expired code cannot be used, although its protected verification record may remain until replaced or removed with the account. Short-lived request-limiting records expire after their security windows and are scheduled for database cleanup. Account emails may remain in your mailbox and in email-provider systems. Operational logs, provider backups and independently maintained accounting or correspondence records may not be removed by app account deletion. Where retained, they are subject to the applicable operational retention arrangements or legal and professional requirements. Contact us for information about records associated with your services and any retention limits that apply.

8. How to delete your account

In the app, open Profile → Delete account and follow the confirmation steps. Successful in-app deletion also attempts to remove that account’s local documents and metadata on the device where you make the request.

You can also delete your account through our account-deletion page, using your email address and password, or contact us for assistance. Web deletion cannot erase files stored on your phone. If you want to clear your local scans as part of deletion, use the in-app option before deleting the account through the website. Copies exported elsewhere or saved on other devices are not removed by either method. Uninstalling the app alone does not delete your server account.

9. Security

We use measures such as HTTPS connections to our account services, password hashing, authenticated account access and operating-system secure storage for mobile sign-in credentials. Local document access within the app is separated by account. These measures do not make local files immune to device compromise, backup access or access outside the app, and uploaded file links have the access limitations described in section 4. No system is completely secure. Protect your device, account credentials and shared links, and contact us if you suspect unauthorized access.

10. Access, correction and privacy concerns

You may contact us to request access to personal information we hold, ask for corrections, request deletion or raise a privacy concern. We may need to verify your identity before acting. Access, correction and deletion may be subject to applicable legal exceptions. We will explain any limitation that applies and respond within the time required by applicable law. We cannot provide copies of local-only scans that have never been sent to us.

If a concern is not resolved with us, you may contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction over your complaint.

11. Children and information about others

DocScan is a general-purpose document and accounting-support app and is not directed to children. If you believe a child has provided personal information to us without appropriate consent, contact us. When you scan or send documents about another person, you are responsible for having the authority or consent needed to do so.

12. Websites and changes to this policy

This policy covers the DocScan app and its account services. Visiting our website or an external checkout may involve website cookies and other processing described in the relevant website’s privacy notice. The app’s local storage and sign-in tokens support its functions and are separate from website advertising cookies.

We may update this policy as the app or our practices change. We will update the date above and provide additional notice, and obtain consent where required, before using information for a materially different purpose.

13. Contact us

For DocScan privacy questions or requests, contact the Privacy Contact at Wealth Street Services Inc.: