Privacy Policy

1. Information We Collect

A. Information You Provide

• Account Information: Name, email address, company name, and job title.
• Payment Information: When you subscribe to a paid plan, our third-party payment processor collects your payment card details, billing address, and transaction history. We do not store full payment card numbers on our servers; we only retain a tokenized reference and the last four digits of your card for display and support purposes.
• Customer Data: Documents (IDs, passports, receipts), images, and data you submit for processing. This may include sensitive Personal Data such as names, government ID numbers, biometric data (facial images), and financial information (from receipts).

B. Automatically Collected Information

• Usage Data: Log files, IP address, browser type, pages visited, API request times, and credit usage.
• Device Information: Device type, operating system.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service.
• Process transactions and send related information.
• Communicate with you, including sending support and administrative messages.
• Ensure security, prevent fraud, and enforce our terms.
• For our legitimate business interest in AI model training: As part of our "Continuous Learning" feature, unidentified document data (that fails initial recognition) is anonymized and used to retrain our AI models. We do not use successfully extracted Personal Data for this purpose without additional, explicit consent.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or UK, our legal basis for processing your Personal Data is:

• Performance of a Contract: To provide the Service you subscribe to.
• Legitimate Interest: For security, improving our Service (via anonymized training data), and administrative purposes.
• Consent: Where required by law, we will obtain your consent before processing Personal Data for specific purposes.

4. How We Share Your Information

We do not sell your Personal Data. We may share information with:

• Service Providers: Trusted third-party vendors who assist in operations (e.g., cloud hosting, analytics) under strict confidentiality and data processing agreements.
• Payment Processors: We share your billing information (name, email, billing address, and payment card details) with our third-party payment processor to facilitate transactions, manage subscriptions, and prevent fraud. Our payment processor handles your data in accordance with PCI-DSS requirements and their own privacy policy.
• Compliance & Safety: To comply with legal obligations, protect our rights, or in connection with a business transfer like a merger or acquisition.
• Your Direction: When you instruct us to share data via an integration.

5. Data Security

We implement technical and organizational measures to protect your data, including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular internal security reviews. Payment transactions are processed through a PCI-DSS compliant payment processor, and we do not store full payment card numbers on our systems.

6. Data Retention

• Customer Data (Processed Documents): We retain the documents and extracted data you submit only as long as necessary to provide the Service, as specified in your account settings or data processing agreement. You can delete your data via the API or dashboard.
• Account Information: We retain as long as your account is active and as needed to comply with legal obligations, resolve disputes, and enforce agreements.
• Payment & Transaction Data: Tokenized payment references and transaction records are retained for as long as required to fulfill billing obligations, resolve disputes, and comply with financial record-keeping laws (typically up to 7 years). Full payment card details are held exclusively by our PCI-DSS compliant payment processor.
• Anonymized Training Data: Derived from unidentified documents, is retained indefinitely to improve our AI models.

7. Your Privacy Rights

Depending on your location, you may have rights to:

• Access, correct, or delete your Personal Data.
• Restrict or object to our processing.
• Data portability.
• Withdraw consent (where processing is based on consent).

To exercise these rights, contact us at [email protected]. We will respond in accordance with applicable law.

8. International Data Transfers

We operate globally. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), for such transfers.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. These include:

• Essential Cookies: Required for authentication, security, and core Service functionality. These cannot be disabled.
• Analytics Cookies: Help us understand how the Service is used so we can improve performance and user experience.
• Payment Cookies: Set by our third-party payment processor to facilitate secure transactions and prevent fraud.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality.

10. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Privacy Policy

We may update this policy. The "Last Updated" date will reflect changes. We will notify you of material changes via email or a notice on the Service.

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at: