Privacy Policy

1. What we collect

When you use our OCR tool, we process the file you upload (or photograph) solely to extract text from it. We also collect:

• An anonymous session identifier (stored in a cookie/localStorage) used to enforce free-tier usage limits
• Your IP address, used only as a backstop against usage-limit abuse
• Your email address, if you create an account, subscribe to a paid plan, or buy word credits
• The original scanned image or PDF, for accounts on a paid plan, so you can revisit or share it later — free-tier scans retain extracted text only
• A one-time verification code sent to your email when you sync a new device — it's deleted immediately once used, or after 10 minutes if not
• If you use the "email a scan" sharing feature, the recipient email address you provide (used only to deliver that one message)
• Basic usage metadata (document count, timestamps, file size) to enforce plan limits

2. How we use it

Uploaded documents are sent to our OCR/AI processing providers solely to extract and, optionally, clean up the text, and are not used to train any models. Extracted text (and, on paid plans, the source image) may be saved to your scan history so you can revisit it later; you can delete individual scans or your account at any time. Sharing a scan by email sends a copy of that scan's content to the recipient address you provide — we don't use that address for anything else. We never sell your data to third parties.

3. Third-party services

We rely on a small number of third-party services to operate this product:

• Payment processing for paid subscriptions and word-credit purchases (Stripe) — we never see or store your card details
• Secure database storage for accounts, usage tracking, and scan history
• Cloud hosting and infrastructure
• Third-party AI/OCR processing providers, used only to extract text from your documents
• Transactional email delivery (Resend), used only to send device-verification codes and scans you choose to email

4. Data retention

Scan history — including the source image on paid plans — is retained according to your plan's retention window (7/30/90 days depending on tier) and is then eligible for deletion. Device-verification codes are deleted after use or within 10 minutes regardless of plan. You can request full deletion of your account and associated data at any time by contacting us.

5. Your rights

You may request access to, correction of, or deletion of your personal data at any time. To make a request, contact us using the details below.

6. Contact

Questions about this policy or your data? Reach us at contact@aetherai.store.