AI Document Parser
Privacy Policy

Your Privacy Matters

Last updated: November 25, 2025

Privacy at a Glance

Encrypted Processing: All documents are encrypted in transit and at rest
No Long-Term Storage: Files deleted after processing completion
No Selling: We never sell your data to third parties
GDPR Compliant: Full compliance with EU data protection laws

1. Information We Collect

We collect minimal information necessary to provide our OCR services:

Account Information: When you sign in with Google, we collect your email address, name, and profile picture.
Document Files: Images or PDFs you upload for OCR processing (temporarily stored during processing only).
Usage Data: Pages visited, features used, processing times, and error logs (anonymized).
Payment Information: Processed securely by our payment provider (Creem). We do not store credit card details.
Technical Data: IP address, browser type, device information, and cookies for functionality and analytics.

2. How We Use Your Information

We use collected information to:

  • Process your documents using OCR technology
  • Manage your account and credits
  • Send service-related notifications (e.g., processing complete, low credits)
  • Improve our AI models and service quality
  • Prevent fraud and ensure security
  • Comply with legal obligations
  • Analyze usage patterns to enhance user experience (anonymized)

3. Data Storage and Security

Our Security Promise:

All uploaded documents are encrypted using AES-256 encryption during transit (HTTPS) and at rest. Files are automatically deleted from our servers within 24 hours of processing completion.

Data Location: Your data is stored on secure servers provided by Supabase and Vercel, with infrastructure located in the United States and EU regions.

Access Control: Only authorized personnel have access to systems, and all access is logged and monitored.

4. Data Sharing and Third Parties

We do NOT sell your personal data. We share data only with:

  • Google OAuth: For authentication (email, name, profile picture)
  • Creem Payment Processor: For secure payment processing
  • Supabase: Database hosting and user management
  • Vercel: Application hosting and content delivery
  • Google Analytics: Anonymous usage statistics (you can opt out)

All third-party services are bound by strict data protection agreements and comply with GDPR.

5. Your Rights (GDPR)

Under GDPR and other privacy laws, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a machine-readable format
Objection: Object to certain data processing
Restriction: Restrict processing under certain conditions

To exercise these rights, contact us at [email protected]

6. Cookies and Tracking

We use the following cookies:

  • Essential Cookies: Required for authentication and core functionality
  • Analytics Cookies: Google Analytics to understand usage patterns (anonymized)
  • Preference Cookies: Remember your settings and preferences

You can disable cookies in your browser settings, but this may affect functionality.

7. Data Retention

  • Uploaded Documents: Deleted within 24 hours after processing
  • OCR Results: Stored only if you save them; otherwise deleted immediately
  • Account Data: Retained until you request deletion
  • Transaction Records: Kept for 7 years for tax and legal compliance
  • Analytics Data: Anonymized and aggregated; retained for 26 months

8. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a prominent notice on our website. Continued use of our service after changes constitutes acceptance.

10. Contact Us

For privacy-related questions, requests, or concerns:

Data Protection Officer: Available via the email above
GDPR Requests: We respond within 30 days as required by law

Have questions about your data?

Contact Our Privacy Team