Privacy Policy
Last updated Oct 25, 2026
Template notice: this starter policy reflects how the service is built. It must be reviewed and completed by the operator's legal counsel before commercial launch.
Who we are
The service is operated by the company named in the site footer ("we"). Contact details are on the Contact page.
Documents you process
- Browser-based tools (labelled "Runs in your browser") process files on your device. Files are not uploaded to our servers.
- Server-based tools upload files over HTTPS to temporary storage. They are processed by our background workers and deleted automatically after the retention period shown on the tool page (by default 1 hour for anonymous use, longer for signed-in users as described in your plan). Deleted files may persist in backups for a limited period before being overwritten.
- AI tools send only the extracted text of your document to our AI provider, and only after you explicitly confirm. [Operator: name the provider and confirm its terms on retention and model training before launch.]
- We do not use your documents for advertising or analytics.
Account data
If you create an account we store your name, email address, hashed password (never the password itself), sign-in sessions, plan and billing status, processing history metadata (tool, time, file count and size — not contents), API keys (stored as hashes) and support conversations.
Payments
Payments are handled by our payment processor. We do not receive or store full card numbers.
Analytics and advertising
With your consent we use Google Analytics to understand which tools are used. Events never include file names, document contents, passwords or extracted text. Advertising (if shown) is only loaded with consent where required and never appears on paid plans that include ad-free use.
Security
We use encryption in transit, encrypted secrets at rest, access controls, rate limiting and audit logging. See the Security page for details.
Your rights
You can access, export and delete your data from your dashboard at any time, and contact us to exercise any other rights available under applicable law (for example under the GDPR, UK GDPR, CCPA or India's DPDP Act).
Retention
Account data is kept while your account exists. When you delete your account we delete or anonymize personal data, except records we must keep by law (for example invoices).
Sub-processors
Hosting, object storage, email delivery, payment processing, error monitoring and (if used) AI providers. The current list is available on request and will be published here before launch.
Changes
We will notify account holders of material changes.