Privacy Policy

1. Our Role

When users upload documents, the Company acts primarily as a data processor, processing content solely on behalf of the user. Users remain responsible for the content they upload.

2. Information We Collect

• Account information (name, email address).
• Billing data processed by Stripe.
• Documents uploaded by users.
• Technical metadata (IP address, device type, usage logs).

3. Document Processing

Documents are processed automatically by system infrastructure. Company personnel do not access or read document content except where strictly necessary to:

• Investigate critical technical issues,
• Respond to verified support requests, or
• Comply with legal obligations.

4. AI Processing (OpenAI)

AI-powered analysis is provided through secure API integrations with OpenAI. Submitted documents are transmitted solely for the purpose of generating AI output within the Service.

Documents are not used by the Company to train AI models and are not authorized for model training by OpenAI under API usage terms.

AI output may not be fully accurate and is provided for informational purposes only.

5. Legal Basis for Processing (Where Applicable)

We process personal data based on contractual necessity, legitimate interests, legal obligations, and user consent, depending on the context.

6. Data Retention

Documents are retained for up to five (5) years from upload unless deleted earlier by the user.

Account and billing records may be retained longer where required for legal or tax compliance.

7. Security Measures

We implement industry-standard safeguards including encryption in transit and at rest, role-based access controls, and infrastructure monitoring.

However, no system can guarantee absolute security.

8. Subprocessors

We engage third-party service providers to operate the Service, including:

• OpenAI (AI processing)
• Stripe (payment processing)
• Cloud infrastructure providers

These providers are contractually obligated to safeguard data.

9. International Data Transfers

Because we operate globally, data may be transferred to and processed in the United States or other jurisdictions.

10. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. Requests may be submitted to our support contact.

11. Children’s Privacy

The Service is not intended for individuals under 18 years of age.

12. Changes to This Policy

Continued use of the Service after updates constitutes acceptance of the revised Privacy Policy.