Legal

Privacy Policy

What we collect, which is very little, and what your self-hosted instance sends us, which is nothing unless you press a button.

Effective September 11, 2026 · Revolution LCA

1. Who is responsible

Revolution LCA, a worker-owned limited cooperative association organized in Colorado, is the controller of the personal data described here. Write to contact@revolution.coop with any question or request about it.

2. What your instance sends us

This is the section most people are actually asking about, so it comes first.

A running docu.nexus instance does not report to us. There is no telemetry, no analytics, no usage metering, and no license check-in. License verification is performed offline, on your own server, by checking a cryptographic signature. An instance that never contacts us keeps working: there is no service of ours that has to stay up for yours.

There are exactly three ways your instance can contact us at all. Every one of them requires a person to press a button, and none of them happens on a schedule:

• Checking for a new version. An administrator can press a button that asks whether a newer release exists. The request carries no identifier, no instance name, and no usage data. We do not log it against you, because there is nothing in it to log.
• Sending feedback. If a user chooses to file a bug or feature report from inside the app, that report is relayed through your own server to a co-op-operated relay service, which files it in our private issue tracker and returns a reference number. It contains what the reporter typed, basic browser and version details, and a screenshot only if they attached one. Nothing is sent unless somebody submits the form.
• Refreshing a license from the portal. Only if an administrator has configured a portal URL and presses "Refresh from portal". Unconfigured, which is the default, no connection is ever opened.

Your content is never part of any of these.

3. What we collect, and why

When you buy a license

Lemon Squeezy, LLC is the merchant of record and collects your payment details. We never see your card number. They pass us what we need to issue and support the license, and we store it in our license ledger:

• your email address, which is the identity your license is issued to
• your name or company name, as given at checkout
• your license record: tier, plugin entitlements, user limit, expiry, status
• an activation fingerprint, which is an identifier your instance derives so that one key can be tied to one installation. It lets us honor a migration to new hardware and detect a key being used on several instances at once. It is not a device profile and it tells us nothing about your content or your users.
• issuance and activation events, so there is a record of what was issued and when

When you sign in to manage a license

We store your email address and a hashed one-time code, with an attempt counter and an expiry, for as long as that sign-in attempt is valid. The code itself is not stored in a readable form.

When you use the contact form

We receive your name, email address, subject, and message, so we can reply. We also briefly hold your IP address to rate-limit submissions, which is what stops the form being used to flood us.

When you browse this website

Nothing. This site runs no analytics, no advertising, and no third-party tracking. It sets no cookies and writes nothing to your browser's storage. Our web server keeps ordinary access logs, as any web server does.

4. Who else is involved

We keep this list short deliberately, and every entry is here because something would not work without it.

• Lemon Squeezy, LLC, our merchant of record, who processes payments, tax, and invoicing. Their privacy policy governs what they collect at checkout.
• Cloudflare, whose Turnstile service checks that the contact form is being submitted by a person. It receives your IP address and browser information for that check. It is not an advertising tracker.
• Zoho, which carries our email.

We do not sell personal data, and we do not share it for advertising. We would disclose data if a valid legal order required it, and we would tell you unless we were prohibited from doing so.

5. How long we keep it

• License records are kept for as long as the license exists and afterwards as needed for tax and accounting obligations, which is generally seven years.
• Sign-in codes expire in minutes and are deleted after that.
• Contact messages are kept while we deal with your question and for a reasonable period afterwards in case you follow up.
• Web server logs are kept on a short rotation.

6. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to how we use it, or receive a copy in a portable form. This includes rights under the GDPR and the CCPA. To exercise any of them, write to contact@revolution.coop.

We will respond within 30 days. We will not charge you for a request, and we will not treat you differently for making one.

One practical limit worth stating plainly: we cannot delete, export, or correct the content inside your instance, because we do not have it. That data is on your server and under your control. If you are an end user of somebody else's docu.nexus installation, the organization running it is the controller of that content, and your request goes to them rather than to us.

7. Where the data is

Our license portal and this website are operated from infrastructure we control. Our service providers listed in section 4 may process data in the United States and elsewhere. Where a transfer out of the European Economic Area or the United Kingdom occurs, it is made under an appropriate safeguard such as the European Commission's standard contractual clauses.

8. Security

License keys are signed with a private key that exists in exactly one place, on the portal, and is never distributed. Sign-in codes are stored hashed. Access to the ledger is limited to co-op members who need it.

No system is perfectly secure, and a policy that claimed otherwise would be worth nothing. If we discover a breach affecting your personal data, we will tell you and any regulator we are required to notify, without undue delay.

9. Children

docu.nexus is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have, write to us and we will delete it.

10. Changes

If we change this policy materially, we will post the new version here with a new effective date. The current version is always the one on this page.

11. Contact

Revolution LCA, by email to contact@revolution.coop.