Privacy policy

Last updated: November 1, 2026

1. Introduction

GNTC Inc. ("GNTC," "we," "us," or "our") provides Dock, a workspace for presentations and documents with a built-in AI agent (the "Services"). This Privacy Policy explains what personal data we process in connection with the Services, why, who we share it with, and the choices and rights you have.

Dock is used by organizations and by individuals. The person or organization that creates a workspace or subscribes to a plan (the "Client") decides what goes into that workspace and who can see it. The people who sign in to use it are "Authorized Users."

2. Scope

This Policy covers personal data we process through:

  • the dock.space website and the Dock web application at app.dock.space and dock.gntc.com;
  • the Dock desktop app and mobile app;
  • the Dock command-line tool, API, and MCP servers (local and remote); and
  • pages and presentations shared through Dock public links, and Dock content embedded in other sites.

It does not cover third-party services you choose to connect to Dock (such as Google Drive, Microsoft SharePoint or OneDrive, Slack, or an AI agent you run yourself), which handle data under their own privacy terms, or other GNTC products, which have their own policies.

3. Definitions

"Client Content" means the material you or other Authorized Users put into or create in Dock: presentations, documents, pages, sheets, databases, uploaded files and images, comments, recordings, prompts and instructions given to AI features, AI output, and content imported from sources you connect. Client Content can include personal data about you or other people.

"Service Data" means information we collect or generate by operating the Services that is not Client Content, such as account details, billing records, sign-in and security logs, usage analytics, and support correspondence.

"Workspace" means a tenant in Dock that holds a Client's content, members, and settings.

"Sub-processor" means a third party GNTC engages to process data on its behalf to provide the Services.

4. Our role

For Client Content, the Client is the controller: it decides what is uploaded, who has access, what is shared publicly, and when content is deleted. GNTC processes Client Content on the Client's behalf to provide the Services. If you want to access or correct Client Content about you, contact the Client (for example, the workspace admin); we will help the Client respond.

For Service Data, GNTC is the controller.

5. Information we process

5.1 Client Content

Dock stores and processes the Client Content you create or bring in, including:

  • files you upload or import (for example PPTX, Keynote, PDF, Word files and images) and the presentations, documents, sheets and databases you edit in Dock;
  • prompts, instructions and selections you send to Dock's AI features, and the output they return;
  • files and folders you import from a connected source such as Google Drive, Microsoft SharePoint or OneDrive, Gamma, or S3-compatible storage;
  • recordings and meeting audio you create in or bring into Dock; and
  • the edit history of a document, which Dock keeps so that people can edit together, undo changes, and restore earlier versions.

5.2 Service Data

Account data. You sign in to Dock with GNTC Login, GNTC's single sign-on service, which can use your Google account. We receive your name, email address and a user identifier from it, and keep your workspace memberships, roles and settings.

Credentials you create. Personal access tokens and OAuth authorizations you grant to the Dock command-line tool, MCP clients and other apps, and the accounts you link (such as a Slack account or a connected source).

Billing data. If you subscribe to a paid plan, your payment details are handled by Stripe; we do not store full card numbers. We keep your plan, subscription and invoice history and AI credit usage.

Usage data. When you are signed in to the web app, we record page views (the page's address without its query string or title) with a pseudonymous user identifier and your workspace identifier, to understand how Dock is used. We also collect performance measurements from your browser, such as how long pages and documents take to load.

Logs. Server logs, error reports and request traces used to run and debug the Services; and an audit log of actions in a workspace (for example permission changes, moves, deletions, restores and agent authorizations), which records who acted, when, and the browser or app used.

Communications. Email we send you (such as invitations and notifications) and messages you send us.

Website visits. The dock.space website does not use analytics or set its own cookies. Some of its pages load fonts from Google Fonts, so Google receives your IP address and browser details when you visit them. A file you open in the dock.space home page's live preview stays in your browser and is not uploaded.

6. How we use information

We use Client Content to provide the Services to the Client: to store, display, convert, export and share it as you direct; to let people edit together; to run the AI features you invoke; to search your workspace; to provide support you ask for; and to prevent abuse and comply with the law.

We use Service Data to authenticate you, bill the Client, operate and secure the Services, measure and improve how Dock works, communicate with you about the Services, and comply with legal obligations. Our legal bases, where the law requires one, are performance of our contract with the Client, our legitimate interests in running a secure and reliable service, your consent where we ask for it, and legal obligations.

We do not sell personal data or Client Content, and we do not use Client Content for advertising. We do not use Client Content to train AI models.

7. How we share information

7.1 Sub-processors

We use the following Sub-processors to provide the Services:

  • Google Cloud: hosting, databases, file storage, backups, request tracing, and text recognition (Cloud Vision) when you convert images or PDFs into editable text.
  • Cloudflare: the dock.space website, DNS, TLS and the network connection to the Dock application.
  • OpenAI: AI image editing and generation, AI editing of HTML blocks, reading the visual style of a picture, and image descriptions (alt text). It receives the images, block content and instructions for the request you make.
  • PostHog: product analytics, receiving the usage data described in Section 5.2.
  • Sentry: reports of server errors.
  • Stripe: payments and subscriptions.
  • Resend: sending email.
  • Iframely: previews of links you paste into Dock, which receives the link.
  • Unsplash: stock photo search, which receives your search terms.

7.2 Other GNTC services

Dock's agent and AI workbench run on EntryDesk, another GNTC service. When you use them, EntryDesk receives your prompts, the content you select or attach, and the presentation or document the agent is working on. The agent can read other pages and files your account can access in the workspace when your request needs them, and returns its output to Dock. When you record a meeting in a document, Dock sends the audio to EntryDesk as you record, and EntryDesk returns the transcript; screen recordings are not sent. EntryDesk uses its own AI model providers, described in the EntryDesk privacy policy. Sign-in is handled by GNTC Login.

7.3 Services you connect

When you or the Client connect a third-party service, Dock exchanges data with it as you direct:

  • Google Drive: with your permission, Dock reads files you choose to import, and creates a file in your Drive when you export to Google Slides.
  • Microsoft SharePoint and OneDrive: with your permission, Dock reads files and sites you choose to import from.
  • Canva: with your permission, Dock lists your presentations and exports the one you choose to import.
  • Gamma: when you paste your Gamma API key, Dock stores it encrypted, uses it to search your presentations and to ask Gamma to export the one you pick, and imports the exported file. You can remove the key at any time.
  • S3-compatible storage: Dock reads from storage the workspace configures with its own credentials.
  • Quip and other sources added to a workspace: Dock sends your requests, with the credential you or the workspace provide, to the service you connect, and receives the content you ask for.
  • Slack: when you link a Slack account, Dock can show previews of Dock links and send you messages there.
  • Your own AI agents: when you connect an agent through the Dock command-line tool, the MCP server or a personal access token, or let the Dock desktop app run a local agent, that agent can read and change what your account can access, and its provider handles that data under its own terms.

Data sent to a connected service is then handled by that service under its own privacy terms.

7.4 Sharing you control

Content is shared with people you invite and, if you turn on a public link, with anyone who has the link; if a document page's link allows editing, signed-in people can also edit it. Dock asks search engines not to index public pages. A workspace admin can restrict or turn off public links for the workspace.

7.5 Legal requirements, safety and business transfers

We may disclose information where we believe in good faith it is necessary to comply with the law or a binding order, enforce our Terms of Service, or protect the rights, property or safety of GNTC, our users or the public. Where the request concerns Client Content, we will notify the Client first unless the law forbids it or there is an emergency. If GNTC is involved in a merger, acquisition, financing or sale of assets, personal data may be transferred as part of it, subject to commitments no less protective than this Policy.

7.6 Aggregated information

We may share aggregated or de-identified information that cannot reasonably identify anyone.

8. Where data is stored

Dock's application, databases and file storage run on Google Cloud in Taiwan. Some Sub-processors process data in other countries: PostHog and OpenAI in the United States, among others, and Cloudflare operates a global network. Personal data may therefore be processed outside the country where you are. Where the law requires it, we use appropriate safeguards for these transfers.

9. Data retention

We keep Client Content for as long as it is in a workspace. Pages, presentations and other items you delete go to the trash, where they can be restored; Dock does not empty the trash automatically. An uploaded file you delete is deleted permanently. To ask us to delete content or an account, email dock@gntc.com. We will delete it from our production systems within a reasonable period, except where the law requires us to keep it; copies in backups expire on the backups' normal retention cycle.

Some data is kept for fixed periods:

  • database backups: 14 days;
  • sign-in sessions: until 30 days after their last use; and
  • uploads that were started but never finished: 1 day.

We keep other Service Data for as long as we need it for the purposes in Section 6: account data while your account exists, billing records for the period tax and accounting law requires, and security and audit logs for as long as needed for security and compliance.

10. Security

We protect personal data with technical and organizational measures, including encryption in transit, encryption at rest, access controls, and audit logging. If we confirm a security incident that affects Client Content, we will notify the affected Client without undue delay.

You are responsible for keeping your sign-in, personal access tokens and agent authorizations safe, and for choosing who you share content with. Tell us at dock@gntc.com if you suspect your account has been compromised.

11. Your rights

Depending on where you live, you may have the right to access, copy, correct, delete, or restrict or object to the processing of your personal data, and to withdraw consent. For Service Data, email dock@gntc.com; we will verify your identity and respond within the period the law requires. For Client Content, contact the Client, and we will help the Client respond. You may also complain to the data protection authority where you live.

12. Children

Dock is not directed to children, and we do not knowingly collect personal data from anyone under 18 or the age of majority where they live. If we learn that we have, we will delete it.

13. Cookies and local storage

The Dock application uses cookies and browser storage that are needed for it to work: to keep you signed in, complete sign-in and connection steps with GNTC Login, connected sources, EntryDesk and Slack, return you to the page you were on after signing in, and remember your language. Product analytics (Section 5.2) keeps a pseudonymous identifier in a cookie or browser storage. We do not use advertising cookies. If you block these cookies in your browser, parts of Dock will not work.

14. The desktop and mobile apps

The Dock desktop app works with files and folders on your computer that you open or connect, and can use your microphone or record your screen when you start a recording. If you approve it, it can import cookies from your browser into its built-in browser, and run AI agents installed on your computer. It checks for updates from Google Cloud Storage. The Dock mobile app shows the Dock web application and keeps your sign-in in your device's secure storage.

15. Links to other sites

Dock content may link to sites run by others. Their privacy practices are their own, and we are not responsible for them.

16. Changes to this policy

We may update this Policy. We will change the date at the top and, for material changes, tell Clients by email or in Dock before they take effect.

17. Contact us

Questions about this Policy or your personal data: dock@gntc.com.