Privacy Policy

1. Ephemeral In-Memory Processing

When you submit a file (via upload, drag-and-drop, paste, or camera capture), it is transmitted directly to the server, kept only in RAM as a Base64 string, and passed immediately to the selected AI Engine (Mistral or Gemini). The image payload is never written to disk, and is destroyed immediately after the extraction response is received.

2. Anonymous Activity Logging

To prevent abuse and monitor system health, we maintain telemetry logs in our Firestore database (`ocr_usage_logs`). These logs record:

• The AI engine selected (Mistral/Gemini)
• Timestamp and IP Address (or User ID if authenticated)
• The MIME type of the file (e.g., `image/jpeg` or `application/pdf`)
• Status (Success/Error)

We never log the content of the image, the extracted text, or the file name.

3. Rate Limiting enforcement

Our memory logs map an IP or User ID against a timestamp to enforce exactly {1} (Anonymous) or {5} (Authenticated) free requests per 12 hours. This mapping is kept in volatile server memory and resets if the server restarts.

4. Third-Party API Processors

Your images are sent to either Mistral AI (France) or Google (Gemini). By operating through our paid Enterprise API keys, neither provider is permitted to use your images or the extracted text to train their future AI models. Your request data is deleted by the provider within 30 days as standard zero-retention enterprise clauses.