DocOur Security Promise
We understand that trusting someone with your immigration documents is one of the most significant acts of trust you can extend. We treat that trust as sacred. Your data is encrypted, your privacy is protected, and your information is never sold, shared, or traded — under any circumstances.
How We Protect You
Six Layers of Protection
AES-256 Encryption at Rest
Every piece of personal information you provide — your name, phone number, email address, A-Number, date of birth, and all uploaded documents — is encrypted using AES-256 encryption before it is stored in our database. AES-256 is the same encryption standard used by the U.S. government for classified information. Even if someone gained access to our database, they would see only encrypted data that is impossible to read without the encryption key.
HTTPS/TLS Encryption in Transit
All communication between your device and our servers is protected by HTTPS/TLS encryption via Cloudflare, one of the world's largest internet security companies. This means that when you fill out a form, upload a document, or chat with our system, the data traveling between your phone or computer and our servers cannot be intercepted, read, or tampered with by anyone.
Automatic Data Deletion
We don't keep your data forever. Client documents and personal information are automatically deleted 30 days after your USCIS approval — or 180 days after filing, whichever comes first. You'll receive a 7-day warning before deletion so you can download your copies. If your case is still pending at 150 days, you can request a one-time 90-day extension. Lead information from non-clients is purged after 90 days. Only anonymized payment records (3 years, IRS) and TCPA consent records (4 years) are retained longer.
Bot Protection & Rate Limiting
Our systems include multiple layers of automated threat prevention: rate limiting on all public endpoints prevents brute-force attacks, honeypot traps detect and block automated bot submissions, and Cloudflare's enterprise-grade DDoS protection shields our infrastructure from large-scale attacks. These protections run 24/7 without any action needed from you.
TCPA-Compliant Communications
We never send text messages, emails, or make phone calls without your explicit consent. All consent is recorded with server-generated timestamps for legal accuracy — not timestamps from your device that could be manipulated. You can opt out of any communications at any time by replying STOP, UNSUBSCRIBE, CANCEL, QUIT, or END to any message.
Your Data Is Never Sold
This is absolute and unconditional. Your personal information — names, addresses, phone numbers, A-Numbers, documents, case details — is used exclusively for preparing your immigration documents. We do not sell it. We do not share it with advertisers. We do not trade it with data brokers. We do not provide it to third parties for any reason except as required by law. Period.
Data Retention Schedule
How Long We Keep Your Data
| Data Type | Retention Period | Then What |
|---|---|---|
| Client PII (names, A-Numbers, DOB) | 30 days after USCIS approval or 180 days after filing | Auto-deleted |
| Uploaded documents (EAD, photos, IDs) | 30 days after USCIS approval or 180 days after filing | Auto-deleted |
| Lead data (non-clients) | 90 days | Auto-purged |
| Payment records | 3 years (IRS requirement) | Auto-deleted |
| TCPA consent records | 4 years (statute of limitations) | Auto-deleted |
| Tax/business records | 7 years (IRS requirement) | Auto-deleted |
Regulatory Compliance
Laws & Standards We Follow
Utah AI Policy Act (UAIP)
We fully comply with Utah's AI disclosure requirements. We clearly disclose when you are interacting with artificial intelligence at every step of the process. No hidden AI. No pretending a bot is a human.
TCPA (Telephone Consumer Protection Act)
All electronic communications require explicit opt-in consent. Server-side timestamps ensure legal accuracy. One-word opt-out (STOP) is always honored immediately.
Professional Oversight
Every case prepared by our AI agents is reviewed by a licensed professional before it reaches you. AI handles precision; humans provide judgment and accountability.
UPL Compliance
DocPros is a document preparation service. We do not provide legal advice, do not recommend which benefit to apply for, and do not represent clients before any government agency. Cases requiring legal analysis are referred to qualified attorneys.
Our Complete Security Commitment
- All personal data is encrypted with AES-256 before storage
- All data in transit is protected by HTTPS/TLS via Cloudflare
- Client documents are automatically deleted 30 days after USCIS approval or 180 days after filing
- Lead information from non-clients is purged after 90 days
- We never sell, share, or trade your personal information
- No electronic communications without explicit consent
- Server-side TCPA timestamps for legal accuracy
- Rate limiting and bot protection on all public endpoints
- AI disclosure at every interaction per Utah AI Policy Act
- Licensed professional reviews every case before filing
- Automated UPL compliance scanning twice daily
- Daily regulatory monitoring for USCIS policy changes
Questions about our security practices? Contact us at [email protected] or call (501) 300-8600.