Legal

Privacy Policy

We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.

Effective: January 1, 2026Last updated: April 15, 2026

DocuExtract is committed to protecting your personal information. We never sell your data to third parties. Documents you process are encrypted in transit and at rest, and are not used to train AI models.

1. Information We Collect

Account Information

When you register, we collect your name, email address, and securely stored credentials. For organization accounts, we may also collect company name and billing address.

Documents You Upload

Files uploaded for extraction are temporarily stored on our secure cloud infrastructure (Cloudflare R2) to process your request. Files are automatically deleted after processing unless you choose to retain them in your job history.

Usage Data

We collect data about how you use DocuExtract, including pages visited, features used, extraction job counts, and credit balance. This helps us improve the product.

Payment Information

All payment processing is handled by Stripe. We never store your full card number on our servers. We receive only tokenized references from Stripe for subscription management.

Technical Logs

We collect standard server logs including IP addresses, browser type, and request timestamps for security monitoring and debugging.

2. How We Use Your Information

  • To provide, operate, and maintain the DocuExtract service
  • To process your document extraction jobs and return results
  • To manage your subscription, billing, and credit balance
  • To send transactional emails (invoices, account alerts, extraction results)
  • To detect and prevent fraud, abuse, and security incidents
  • To improve our AI models using aggregated, anonymized extraction metrics (never your document content)
  • To comply with legal obligations

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only with the following trusted service providers, strictly to deliver our service:

  • Stripe — Payment processing and subscription management
  • Cloudflare R2 — Secure document storage (encrypted at rest)
  • OpenAI — AI-powered document analysis (documents sent via API, not retained by OpenAI per their API terms)
  • Hostinger / SMTP provider — Transactional email delivery
  • Redis Cloud — Job queue infrastructure

We may disclose data if required by law or to protect the rights, property, or safety of DocuExtract, our users, or the public.

4. Data Retention

  • Uploaded documents are deleted from our storage after job completion (within 24 hours) unless you enable "Keep Files" in your settings
  • Extraction results (structured data) are retained in your account until you delete them
  • Account data is retained for the lifetime of your account plus 90 days after deletion
  • Billing records are retained for 7 years as required by financial regulations

5. Security

We implement industry-standard security measures including:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for documents at rest
  • Bcrypt hashing for all passwords (never stored in plain text)
  • JWT-based authentication with short-lived access tokens
  • Role-based access control within organizations
  • Regular security audits and dependency updates

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — Request a copy of the data we hold about you
  • Rectification — Correct inaccurate personal data
  • Erasure — Request deletion of your account and associated data
  • Portability — Export your data in a machine-readable format
  • Objection — Opt out of non-essential communications

To exercise any of these rights, contact us at info@docuextract.pro.

7. Cookies

DocuExtract uses only essential cookies required to maintain your authenticated session. We do not use advertising, tracking, or analytics cookies. No third-party tracking scripts are loaded on our platform.

8. Children's Privacy

DocuExtract is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website at least 14 days before the change takes effect. Continued use of the service after the effective date constitutes acceptance.

10. Contact Us

For privacy-related inquiries, please contact: