Privacy Policy
Last updated: October 2026
1. Core Commitment: Anonymity & Zero Retention
ScanText OCR was designed from the ground up to respect document confidentiality. You can extract text from images and PDF files completely anonymously without creating an account or providing any personal identification.
2. Automated Temporary File Lifecycle & Erasure
When you upload an image (JPG, JPEG, PNG, WEBP) or PDF file for text extraction:
- Files are assigned random UUID v4 filenames in temporary system memory (
/tmp/ocr_uploads/). - Original filenames and local disk paths are never stored or logged in server access logs.
- Immediate Destruction: As soon as the OCR character extraction completes, temporary files are permanently destroyed and unlinked from memory using Python context managers.
- Automated Celery Beat Sweep: An automated background task runs every 15 minutes to guarantee that any orphaned temporary files older than 24 hours are expunged.
3. No Extracted Text Storage or AI Training
Your document contents belong entirely to you. We never log, inspect, store, or train machine learning models on your raw extracted text. Server logs record only anonymous diagnostic performance metrics (e.g., execution duration in milliseconds and HTTP status codes).
4. Account Information & Third-Party Processors
If you voluntarily register an account or subscribe to ScanText Pro:
- Account Data: We store your email address and a cryptographically salted password hash (Argon2 / bcrypt). We never store plaintext passwords.
- Payment Processing: All subscription billing is processed directly by Stripe, Inc. We never receive or store your credit card numbers or banking credentials.
- Single Sign-On: If you log in via Google OAuth 2.0, we receive your email and profile ID to authenticate your session.
5. Advertising & Sponsor Disclosures (Free Tier)
To maintain a free tier without requiring subscriptions, we display sponsor notices and non-intrusive advertisements to anonymous and free-tier users. Third-party advertising networks may utilize cookies in accordance with our Cookie Policy. Pro tier accounts are 100% ad-free and never receive ad scripts or ad cookies.
6. Your Rights Under GDPR & CCPA/CPRA
Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the right to request access to, rectification of, or permanent erasure of your personal account data. To exercise these rights, contact us at our contact page.