Privacy policy
Last updated: 17 August 2026. Operator: Docomo.lk, Sri Lanka. Contact: thathsilura@gmail.com
1. What this service does
Docomo.lk converts, compresses, protects and reads documents and images. Files are processed on our own server, not on a third party file conversion service.
2. Files you upload
- Uploads are written to a temporary working folder with a random name, used for your job, then deleted. Temporary files are removed as soon as the job finishes and a sweeper deletes anything left behind.
- If you are signed in on a plan that includes cloud storage, results you choose to keep are stored under your account until you delete them or your storage allowance is reached.
- Any tool can be run with cloud saving switched off. Guests never get cloud storage, so guest files are always temporary.
- We do not read, sell, publish or train anything on your documents.
3. The AI reader
- When you use the AI tabs, the text extracted from your document is sent to our AI provider (DeepSeek) so it can answer your question, pull out fields, summarise or translate. Images and the original file are not sent, only the text.
- The extracted text is held in our database so follow up questions work, and is deleted automatically: two hours for guests, twenty four hours on the Free plan, seven days on Pro. You can delete a document sooner from the AI panel.
- Identity numbers and similar values are used only to answer your request. National identity card numbers are verified with a formula on our own server, not by the AI.
- API keys live only on the server, encrypted. They are never sent to your browser.
4. Account information
We store your name, email address, a password hash (scrypt, never the password itself), your plan, your usage counters and a hashed form of your IP address for abuse prevention. Login attempts are recorded so accounts can be locked after repeated failures.
5. Payments
Card payments are handled by PayHere. Card numbers never reach our servers. We keep the order reference, amount, currency, status and payment method returned to us so we can activate your plan and answer billing questions.
6. Cookies
- A session cookie keeps you signed in.
- A cross site request forgery token cookie protects your requests.
- A small guest cookie counts free daily jobs for people without an account.
- No advertising or tracking cookies are used.
7. Your rights
Write to thathsilura@gmail.com to get a copy of your data, correct it, or have your account and files deleted. We answer within seven working days.
8. Security
Traffic is served over HTTPS. Uploads are checked by content, not just by file name. Every tool runs with size, page and time limits, and file paths are validated so a job cannot reach outside its own folder. Secrets are encrypted at rest with AES-256-GCM.
9. Changes
If this policy changes we update the date above and show a notice on the site.