AgentDock

GDPR overview

GDPR implementation is minimal and appears in one place only, the product documentation rather than the legal pages: "Dock supports the data rights GDPR requires, including access to your data and deletion of it." The privacy policy never names the regulation; it grants a right to "access, update, or delete your personal data at any time" plus an opt-out from marketing communications. The terms of use do not mention it at all. There is no Article 27 EU representative, no named data protection officer, no data processing agreement, no sub-processor list, no stated legal basis for processing, no retention period and no documented international transfer mechanism. The privacy policy carries neither an effective date nor a last-updated date, and the terms of use still contain an unfilled placeholder: "governed by the laws of [jurisdiction]".

Who owns the data?

Under the terms of use you keep ownership of the content you post, but you grant AgentDock a licence to use it, and the published text does not bound that licence in scope, duration or purpose. Content the publisher judges inappropriate may be removed at its discretion, and everything belonging to the platform itself, trademarks and materials included, stays its property. The product documentation is firmer about writing: "Your writing is yours, it is not used to train AI models, and you can take it out or delete it whenever you choose." Documents sit on Dock's servers, tied to your account. No sub-processor list is published, so who else may handle that content is never stated.

Reuse rights

Nothing in the published terms restricts commercial reuse of the text you produce with Dock: the output is yours to publish, sell or repurpose without asking permission. Getting the work back out is just as open, and the documentation is explicit that "you are never locked in": "Any document exports to Markdown, HTML, plain text, or Word, or copies to the clipboard, so your writing can leave Dock the moment you want it to." The product page adds PDF and LaTeX, and Word exports keep the tracked-change marks. A document can also be published straight to a public /p/{slug} URL with SEO metadata. Individual documents can be deleted from the editor, and the whole account from settings.

Data retention & training

Hosting summary

No hosting jurisdiction is published. The documentation says only that "Documents live in your account on Dock's servers, available wherever you sign in and syncing as you write". No country, no region and no cloud provider is named anywhere on the site, and no data processing agreement, sub-processor list or certification such as SOC 2 or ISO 27001 is available. The site itself is served behind Cloudflare (AS13335, anycast address 188.114.96.0), which says nothing about where documents are stored. Declared security measures stay generic: "We implement various security measures, including encryption and secure storage, to protect your personal information." Zotero and Mendeley logins are described as protected credentials. In the Chrome extension, per-site drafts and preferences stay in the browser local storage, while prompts and documents live on the account and are described as encrypted. The privacy policy mentions sharing with trusted third-party service providers; Stripe and Google Analytics are named elsewhere on the site, but no named list of processors is published.