Doxzo privacy model is deliberately simple: give access to the least, keep it for the shortest time, and remove it automatically.
No one can reach a document unless a specific print job requires it. Vendors see assigned jobs only, customers see their own documents only. There is nothing to stumble upon.
A print document lives exactly as long as the job needs it. When the job ends, the file is removed. Storage time is measured in hours, not years.
Only the metadata required for the workflow is retained. Document contents are never treated as metadata, and filenames are never used as storage locations.
No one has to press delete. Expired and completed jobs are purged automatically, in the background, even if nobody opens the app again.
Every job follows a fixed sequence of states, recorded as it happens. The flow can be traced without keeping the document.
An honest boundary keeps the promise meaningful.
Doxzo does not claim the vendor never receives the document. Its privacy promise is about minimizing exposure: temporary access, scoped authorization, and automatic deletion.
See the Doxzo Privacy page and the Security page for the full picture.
See how the principles are applied across the product.
