> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dmly.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Attach documents to a contact

> Upload private files to a contact's profile (contracts, ID scans, signed forms) and control who can add or remove them.

Every contact's profile has a **Documents** card for files that belong to that one person: a
signed contract, an ID scan, an intake form, anything you'd otherwise keep in a folder. It lives
on the contact's **Files & letters** tab, alongside [client letters](/contacts/letters), and it's
there for leads as well as clients; you don't need to convert someone first.

<Note>
  Storage is private. A document is never given a public URL; the only way to get the file back
  is the authenticated download link on the contact's own profile, which only works while you're
  logged in to the workspace.
</Note>

## Upload a document

<Steps>
  <Step title="Open the contact">
    Go to **Contacts**, select the person, then open their **Files & letters** tab and find the
    **Documents** card.
  </Step>

  <Step title="Drop a file, or select Browse">
    The **Documents** card has a dashed drop zone reading *Drop a file or Browse*. Drag a file
    onto it (it highlights while you hover) or select it to open your device's file picker.
    One file at a time: drop several and only the first is uploaded.
  </Step>

  <Step title="Wait for it to appear">
    The file uploads immediately and shows up at the top of the list with its size, how long ago
    it was added, and who added it.
  </Step>
</Steps>

### Allowed file types and size

<Note>
  DMLY accepts **PDF, JPG/JPEG, PNG, WEBP, Word (.docx), Excel (.xlsx), CSV and plain text
  (.txt)** files, up to **20 MB** each. The zone's own hint says as much: *Attach files (PDF,
  images, spreadsheets — max 20 MB).* Anything else, or anything larger, is rejected with an
  error under the drop zone, and nothing is saved.
</Note>

There's no limit on how many documents a contact can have.

## Download a document

Select the filename, or the download icon next to it. Both point at the same authenticated link,
so the file only opens for someone signed in to the workspace; there's nothing to copy and paste
into an email that would work for an outsider.

## Delete a document

Select the trash icon on the document's row and confirm. This removes the file from storage as
well as the row in the list; there's no way to recover it afterwards.

<Warning>
  Deleting a document is immediate and permanent. There's no trash or undo, so check you have a
  copy elsewhere first if you might need it again.
</Warning>

## Who can do this

Anyone who can open the contact's profile can see and download what's already there. Uploading
and deleting are more restricted: they need a separate document-management permission.

* **Owners and Admins** have it automatically.
* **Members** and **Viewers** don't have it by default; a Member who can otherwise edit the
  contact still won't see the drop zone or the delete icon.
* You can grant it to a Member through a **custom role**; it's a standalone permission in the
  Contacts module, so you can hand someone document access without also giving them contact
  deletion, import or export.

See [Roles and permissions](/account/roles-and-permissions) to build a role that includes it.

<Note>
  If you generate a letter for a client (a contract or statement DMLY produces from a template),
  it's stored the same way and also shows up in this list alongside anything you uploaded by
  hand, since it's the same kind of private file underneath.
</Note>

## What happens on delete or merge

<Columns cols={2}>
  <Card title="Deleting the contact" icon="trash">
    Removes every document that was attached to them, files included. This happens as part of
    [deleting the contact](/contacts/data-and-privacy) itself; there's no separate step.
  </Card>

  <Card title="Merging two contacts" icon="code-merge">
    Re-points the duplicate's documents onto the surviving profile, so nothing is lost. See
    [merging duplicates](/contacts/overview#when-one-person-becomes-two-contacts).
  </Card>
</Columns>

<Columns cols={2}>
  <Card title="Client profile" icon="user-tie" href="/contacts/client-profile">
    Everything else on a contact's profile page.
  </Card>

  <Card title="Data and privacy" icon="shield-halved" href="/contacts/data-and-privacy">
    How deleting and merging a contact work in full.
  </Card>

  <Card title="Roles and permissions" icon="user-lock" href="/account/roles-and-permissions">
    Grant document access to a Member without giving them everything else.
  </Card>
</Columns>