Privacy Policy

Welcome to Doc2OCR ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API and services (collectively, the "Services").

Please read this policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.

We collect two types of information:

• User Account Information: Data you provide when you create and manage your account with us.
• Customer API Data: Data you or your end-users process through our API.

2.1. User Account Information

When you register for an account, we may collect information such as:

• Contact Information: Your full name and email address.
• Company Information: Your company name and role.
• Usage Information: Metadata about your API usage, such as the number of calls, API keys used, and error rates.

2.2. Customer API Data

Our API is designed to process financial documents like GST certificates and ITR forms ("Customer API Data") that you submit.

We are a data processor for this information. You are the data controller. This means you own and control this data.

Our Commitment to Your Data: We have a strict policy regarding Customer API Data:

• No Storage Policy: We do not store your Customer API Data. All documents are processed in-memory and are permanently deleted immediately after the data extraction process is complete and a response has been sent to you.
• No Training Policy: We DO NOT use your Customer API Data to train our models or for any other purpose besides fulfilling the direct API request.

We use the **User Account Information** we collect to:

• Provide, operate, and maintain our Services.
• Process transactions and manage your account.
• Send you technical notices, updates, and support messages.
• Monitor and analyze trends to improve the Services.
• Communicate with you about products, services, and offers.
• Prevent fraudulent activity and ensure the security of our platform.

We only use **Customer API Data** to perform the requested data extraction and return the structured JSON output to you.

We do not sell your personal information or Customer API Data.

We may share **User Account Information** in the following limited circumstances:

• With Service Providers: We may share information with third-party vendors who need access to such data to carry out work on our behalf (e.g., cloud hosting providers, payment processors).
• For Legal Reasons: We may disclose information if required to do so by law or in response to a valid request by public authorities.
• Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company.

We use industry-standard administrative, technical, and physical security measures to help protect your User Account Information. All communication with our API is encrypted in transit using SSL/TLS.

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.

You have the right to access, update, or delete your User Account Information at any time by logging into your account or contacting us directly.

As we do not store Customer API Data, we have no ability to access or provide it to you after the initial API call is complete.

Our Services are not intended for use by anyone under the age of 18. We do not knowingly collect personally identifiable information from children.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this page periodically for any changes.

If you have any questions about this Privacy Policy, please contact us at:

Doc2OCR