Privacy Policy

1. Information We Collect

Personal Data

We collect information you provide directly when creating an account or using the service:

• Email address
• Name (if provided via the contact form)
• Account credentials (passwords are stored as bcrypt hashes)

We do not collect phone numbers, physical addresses, or government identification numbers through our service.

Document Data

Documents you upload are processed for redaction only. We do not read, analyze, or use the content of your documents for any purpose other than providing the redaction service you requested. Specifically:

• LocalAI engine (default alternative): documents are processed using local AI models hosted entirely on our own infrastructure — they are never sent to any third-party AI vendor.
• EU Based Mistral LLM engine (default): when you select this option, extracted text from your documents is sent to Mistral AI's EU-hosted API for PII detection. Mistral AI is a French company and all API processing occurs within the European Union. Only the text content of each page is transmitted — no images, metadata, or original PDF files are shared. Mistral AI's Privacy Policy.
• Completed redactions are auto-deleted 2 hours after processing. In-flight sessions are purged after 24 hours of inactivity.
• You can delete your sessions manually at any time.
• We do not train AI models on your documents or retain document content beyond the processing window described above. Mistral AI does not use API inputs for model training (see their Data Processing Agreement).

Usage Data

We automatically collect certain information when you use the service:

• IP address
• Browser type and version
• Pages visited and time spent
• Device identifiers and diagnostic data
• A randomly generated internal identifier (for signed-in users only) sent to Google Analytics to connect activity across sessions and devices — this is not your email, name, or any personally identifiable information, and Google cannot use it to identify you

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the service
• Process your subscription and manage billing
• Respond to support requests and contact form submissions
• Send transactional emails (account verification, password resets)
• Monitor usage for security and abuse prevention
• Enforce our Terms & Conditions

We will never sell, rent, or trade your personal data. We do not use your data for advertising or profiling purposes.

3. Third-Party Service Providers

We share information with the following providers only as necessary to operate the service:

Analytics

We use Google Analytics to understand how the service is used. Google Analytics collects usage data such as pages visited and session duration. For signed-in users, we send a randomly generated hash (user ID) to Google Analytics so we can connect activity across sessions and devices. This hash is not your email address, name, or any other personally identifiable information — it is an opaque identifier that Google cannot use to identify you as an individual. When you sign out, the identifier is cleared. You can opt out of analytics entirely via Google's browser add-on. For more information, see Google's Privacy Policy.

Payments

Payments are processed by Lemon Squeezy, our merchant of record. We do not store your payment card details. See Lemon Squeezy's Privacy Policy.

Transactional Email

Account verification and password reset emails are sent via Resend. See Resend's Privacy Policy.

AI Processing (Mistral LLM engine)

When you select the "EU Based Mistral LLM" detection engine, extracted page text is sent to Mistral AI (a French company) via their EU-hosted API for PII entity detection. Only plain text is transmitted — never images, original PDF files, or account information. Mistral AI does not use API inputs for training and processes all data within the EU. See Mistral AI's Privacy Policy.

Hosting & Infrastructure

The service runs on infrastructure we manage. When using the LocalAI engine, all document processing, AI inference, and OCR happen within our own cluster — no third-party AI APIs are involved. The Mistral LLM engine is the only feature that communicates with an external AI provider, as described above.

CDN & Security

We use Cloudflare for DNS, CDN, and DDoS protection. Cloudflare may process your IP address and request metadata in transit. See Cloudflare's Privacy Policy.

4. Data Retention

• Documents: auto-deleted 2 hours after processing completes. In-flight sessions purged after 24 hours of inactivity. Manually deletable at any time.
• Account data: retained while your account is active. You can delete your account and all associated data at any time from the account menu in the application, or by contacting us.
• Redaction logs: we keep a record of redaction events (timestamp, credit count, document metadata such as page count and file size) for billing and quota enforcement. These logs do not contain document content.
• Usage data: retained for analytics purposes and periodically aggregated or deleted.

5. Data Security

We use encryption in transit (TLS), access controls, and infrastructure isolation to protect your data. Passwords are stored as bcrypt hashes. Documents are processed in memory and stored temporarily in private buckets accessible only by authenticated sessions.

Despite these measures, no system connected to the internet can eliminate every risk. We continuously improve our defences but cannot promise that a breach will never occur. If one does, we will notify affected users promptly in accordance with applicable law.

6. Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data when there is no legitimate reason for us to continue processing it.
• Restriction: request that we restrict the processing of your data in certain circumstances.
• Data portability: request your data in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at contact@documentredactor.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Your Rights Under CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information
• Not be discriminated against for exercising your privacy rights

We do not sell your personal information. To exercise your rights, contact us at contact@documentredactor.com.

8. Children's Privacy

Document Redactor is designed for professional use and is not directed at anyone under the age of 18. We do not intentionally gather data from minors. If you become aware that a child has created an account or submitted personal data, please let us know and we will remove it promptly.

9. Cookies

We use the following cookies:

• Authentication cookies: session cookies to keep you signed in. These are essential for the service to function.
• Anonymous session cookie: an HttpOnly cookie (pdfr_anon_session) that tracks your upload sessions before you sign up, so your work is preserved when you create an account.
• Cookie consent: pdf-redactor-cookie-consent stores your analytics consent choice ("granted" or "denied"). 1-year expiry. Set when you click Accept or Decline on the consent banner.
• Redaction profiles: pdf-redactor-profiles stores your custom redaction profile configuration. 1-year expiry, not HttpOnly.
• Default profile: pdf-redactor-default-profile stores your preferred default redaction profile ID. 1-year expiry, not HttpOnly.
• Detection engine preference: pdf-redactor-engine stores your preferred detection engine ("mistral" or "local"). 1-year expiry, not HttpOnly.
• Analytics cookies: Google Analytics cookies for usage measurement, loaded only after you grant consent via the cookie banner. You can withdraw consent at any time by clearing the consent cookie.

We do not use advertising cookies or third-party tracking cookies.

10. Data Location & Sovereignty

Document Redactor is an EU-based company. All infrastructure — including servers, databases, AI models, and document storage — is hosted exclusively in European Union data centres. Your documents and personal data do not leave the EU during processing or storage.

Enterprise and Enterprise+ customers who need data sovereignty in a specific region or jurisdiction can contact us at contact@documentredactor.com to discuss dedicated regional deployments.

Some third-party service providers we use (Google Analytics, Lemon Squeezy, Resend) may process limited account or usage data outside the EU. Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses where applicable. When the Mistral LLM engine is selected, extracted page text is processed by Mistral AI within the EU. Document content is never shared with any other provider.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at documentredactor.com/privacy. Material changes will be communicated via email or in-app notification.

12. Contact Us

If you have any questions about this Privacy Policy, contact us at contact@documentredactor.com.