Privacy Policy
Last Updated: May 20, 2026
1. Information We Collect
Account Data: When you register, we collect your email address and encrypted password.
Billing Data: We do not store your credit card information. All payments and billing details are processed and stored securely by our Merchant of Record, Paddle.
Audit Logs: We log metadata about your API requests (e.g., timestamps, provider used, token usage, latency) for billing and security purposes.
2. How We Handle Your Documents (Payload Data)
When you upload a document via our API:
Ephemeral Processing: Documents are processed in memory to route to the appropriate engine (AWS Textract, Google Cloud Vision, or local parsing) and map the schema via OpenAI.
No Training: We do not use your uploaded documents or extracted JSON data to train our own machine-learning models.
Storage: We do not store the original files or the extracted JSON payloads on our servers after the API request is completed, unless explicitly opted-in for debugging purposes.
3. Third-Party Sub-processors
To provide the Service, we share necessary data with trusted third parties:
- Google Cloud & AWS: For Optical Character Recognition (OCR).
- OpenAI: For JSON schema normalization.
- Paddle: For payment processing and tax compliance.
4. Your Rights
You have the right to request access to, correction of, or deletion of your personal account data at any time by contacting support@smartocr.dev.