What we collect, how documents are encrypted and access-controlled, how long anything is retained, and how to have it deleted.