Privacy Policy

Short version: you upload files, we extract text, we delete the files within 72 hours. We don't sell your data, don't train AI on your files, and don't share your content with third parties except service providers who help us run the site.

What we collect

• Files you upload — processed in memory, stored briefly, deleted within 72 hours.
• Account data — email, plan, usage counters (only if you create an account).
• Technical data — IP address (for rate-limiting anonymous users), browser/device, basic analytics.
• Payment data — handled by our payment processor (Stripe); we never see your card details.

How we use it

To run the OCR extraction, apply your plan limits, email you about account and billing, detect abuse, and improve the product via aggregated analytics.

What we don't do

• Sell your personal data.
• Train AI models on your files.
• Share your content with advertisers or data brokers.
• Retain source files longer than 72 hours.

Who we share with

Only service providers who help us operate: hosting (GCP), payments (Stripe), email (Postmark), error reporting (Sentry). They're bound by data-processing agreements and can't use your data for their own purposes.

Your rights

You can access, export, or delete your account data at any time from the settings page. EU/UK/California residents have additional rights under GDPR/CCPA — contact us to exercise them.

Cookies

Essential cookies only for authentication and language preference. No tracking or ad cookies without your consent.

Security

Encryption in transit (TLS) and at rest. Access to production data is limited to a small set of engineers with audited credentials. We'll notify affected users within 72 hours of a confirmed breach.

Contact

Privacy questions: contact [at] scanread.ai