Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information — name, email address, and organization details you provide when registering.
• Content — documents and data you upload to or process through the Service.
• Usage data — log data, device information, and analytics about how you interact with the Service.
• Cookies and similar technologies — see our Cookie Policy for details.

2. How We Use Your Information

We use your information to:

• provide, operate, and maintain the Service;
• process and extract data from documents you submit;
• communicate with you about your account, updates, and support;
• monitor and improve the Service, including security and performance;
• comply with legal obligations and enforce our terms.

3. Document Processing and PII

Documents you submit may be processed using automated extraction and, where enabled, sanitization that masks personally identifiable information (PII) such as bank details and personal addresses. Processing is performed to deliver the Service and is scoped to your organization.

We do not use the contents of Your Content to train general-purpose models without your consent.

4. Legal Bases for Processing

Where applicable law (such as the GDPR) requires it, we rely on the following legal bases: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (for certain cookies and communications), and compliance with legal obligations.

5. Sharing and Disclosure

We do not sell your personal information. We may share information with:

• service providers who help us operate the Service (for example, cloud hosting and infrastructure), under appropriate confidentiality and data-protection obligations;
• third-party integrations you choose to connect;
• authorities when required by law or to protect rights and safety.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Original documents may be retained for a configurable period after extraction (by default 90 days). We delete or anonymize information when it is no longer needed, subject to legal requirements.

7. Security

We implement technical and organizational measures designed to protect your information, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at [email protected]. We will respond in accordance with applicable law.

9. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

10. Children’s Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised effective date and, where appropriate, provide additional notice.

12. Contact

For privacy questions or requests, contact [email protected].