Privacy Policy

Welcome to Pixcribe. Pixcribe provides users and visitors ("you" and "your") with AI-powered data extraction services for PDFs, images, screenshots, documents, and text inputs (the "Services"). Our core functionality includes OCR, document parsing, image understanding, and structured data extraction.

This Privacy Policy (the "Policy") describes how Pixcribe collects, uses, shares, stores, and protects personal information in connection with the Services. Please read this Policy carefully before using the Services or submitting information to us. By using any part of the Services, you acknowledge that your information will be processed as described in this Policy. To the extent permitted by law, the English version of this Policy controls and any translations are provided for convenience only.

If you are in the European Economic Area, the United Kingdom, or Switzerland ("Europe"):

• for the purposes of the EU General Data Protection Regulation 2016/679 (the "GDPR"), the data controller is Pixcribe, which may be contacted using the information in Section 12 below; and
• you may not be required to provide consent to this Policy, but you acknowledge that you have read and understood it.

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020.

This Policy applies unless it conflicts with laws or regulations that apply to you. It covers:

1. Definitions
2. What Information We Collect
3. How We Use Your Information
4. How We Disclose Your Information
5. How We Handle Children's Personal Information
6. Security
7. Do-Not-Track Signals
8. How Your Information Will Be Stored and Transferred
9. Your Rights
10. Supplemental Terms for Certain Regions
11. How the Policy Will Be Updated
12. How to Contact Us

1. Definitions

In this Policy, unless the context requires otherwise:

"We," "us," and "our" refer to the Pixcribe team and the service providers we engage to operate the Services.

"Cookies" are small files placed on your computer, mobile device, or other device that store information about your browsing activity and preferences.

"Data Controller" means the legal person that determines the purposes and means of processing personal information. For GDPR purposes, Pixcribe is the Data Controller for the personal information described in this Policy.

"Personal Information" means information that relates to an identified or identifiable individual. Under GDPR, this includes information such as a name, identification number, location data, online identifier, or factors specific to a person's identity. Under the CPRA, it includes information that identifies, relates to, describes, or could reasonably be linked with you directly or indirectly.

"Website" means Pixcribe, accessible from https://pixcribe.com.

"Sell" means disclosure of personal information to another business or third party for monetary or other valuable consideration, as defined by applicable law.

"Service" means our AI-powered OCR, document understanding, image analysis, text extraction, and structured data extraction tools and related features.

"Service Provider" means a person or entity that processes information on our behalf, including infrastructure, analytics, authentication, payment, and support providers. Under GDPR, Service Providers are considered Data Processors.

"Usage Data" means data collected automatically from your use of the Services or the underlying infrastructure, such as browser information, request logs, and page interaction events.

Under GDPR, you may also be referred to as the "Data Subject" or "User."

2. What Information We Collect

We collect information in multiple ways when you use the Services, including information you provide directly and information collected automatically from your browser or device.

2.1. Information That You Provide Directly to Us

A. Registration Information

When you register for an account or sign in to the Services, we may collect your email address, display name, account credentials or authentication identifiers, and any profile information you choose to provide.

If you are in Europe, we process this information to enter into and perform our contract with you under Art. 6 para. 1 subpara. 1 b) GDPR.

B. Purchase and Billing Information

When you purchase paid features or subscriptions, we and our payment service providers may collect order details such as transaction identifiers, subscription plan, billing timestamps, and payment status. Payment card details and similar payment credentials are typically collected and processed directly by our payment processors rather than stored by us.

If you are in Europe, we process this information to enter into and perform our contract with you under Art. 6 para. 1 subpara. 1 b) GDPR.

C. Content You Submit Through the Services

We collect the content you upload, submit, paste, or generate through the Services. This may include PDFs, images, screenshots, documents, extracted text, prompts, field definitions, structured outputs, and related instructions. This content may contain personal information about you or others. If you provide personal information relating to another person, you represent that you have obtained any rights, permissions, and consents necessary to do so.

To support privacy, we aim to minimize retention and may periodically delete uploaded files, extracted outputs, and related processing artifacts in accordance with our operational practices.

D. Communications With Us

If you contact us by email or otherwise request support, we collect the information you choose to provide, such as your contact information and the contents of your communication. Please do not send us sensitive financial, medical, or highly confidential information unless we specifically request it for support purposes.

2.2. Information That Is Automatically Collected

A. Usage Information

When you use the Services, we automatically collect certain device and usage information such as IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, actions taken in the product, crash reports, approximate location inferred from IP address, and request timestamps. We use this information to operate, secure, maintain, and improve the Services.

If you are in Europe, we process this information based on our legitimate interests under Art. 6 para. 1 subpara. 1 f) GDPR, provided those interests are not overridden by your rights.

B. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to remember preferences, understand product usage, improve performance, support analytics, and maintain security. Depending on the technology, the information collected may include IP address, browser identifiers, session identifiers, and interaction information.

3. How We Use Your Information

We use the information we collect in ways that are consistent with this Policy.

3.1. To Provide and Maintain the Services

We use your information to authenticate users, process uploads, run OCR and AI extraction workflows, generate outputs, store settings, provide account functionality, support subscriptions, prevent abuse, and otherwise operate the Services.

3.2. To Improve the Services

We use information to analyze usage patterns, troubleshoot issues, improve reliability, build new features, and enhance extraction quality. Where practical, we prefer to use aggregated, anonymized, or de-identified information for these purposes.

We do not sell your personal information to advertisers. If we use customer content to improve our systems, we do so subject to applicable law, our contractual commitments, and internal controls intended to protect user privacy.

3.3. To Communicate With You

We use your contact information to send transactional emails, account notices, product updates, billing communications, security alerts, and customer support responses.

3.4. To Enforce Our Terms and Protect the Services

We may use information to detect fraud, prevent misuse, investigate suspicious activity, enforce our Terms of Use, and protect the rights, safety, and security of Pixcribe, our users, and third parties.

4. How We Disclose Your Information

We do not sell your personal information to advertisers or data brokers. We may disclose your information in the following circumstances:

4.1. Service Providers

We share information with third-party vendors and service providers that help us operate the Services, such as hosting providers, cloud storage providers, authentication providers, analytics providers, payment processors, customer support tools, security vendors, and AI or OCR infrastructure providers. These providers may process information only on our behalf and subject to appropriate contractual or legal safeguards.

4.2. Legal Compliance and Protection

We may disclose information to government authorities, regulators, courts, or law enforcement if required by law, subpoena, court order, or legal process, or if we believe disclosure is reasonably necessary to protect our rights, investigate fraud, respond to security issues, or comply with applicable law.

4.3. Corporate Transactions

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, your information may be disclosed to counterparties, advisers, and successors as part of that process, subject to customary confidentiality protections.

4.4. With Your Direction or Consent

We may disclose your information to others when you instruct us to do so or otherwise consent to the disclosure.

4.5. Aggregated or De-Identified Information

We may aggregate, anonymize, or de-identify information so that it no longer identifies you. We may use and disclose this information for lawful business purposes, including analytics, security, and product improvement.

4.6. Public or Shared Workspaces

If the Services include collaboration, publishing, or sharing features and you choose to make content available to others, the information you choose to share may be visible to those users.

5. How We Handle Children's Personal Information

The Services are not directed to children under 13, or under 16 where a higher age threshold applies under local law in Europe. We do not knowingly collect personal information from children. If we learn that a child has provided personal information to us, we will take steps to delete it as required by applicable law. If you believe a child has submitted personal information to us, please contact us at [email protected].

6. Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures may include encryption in transit, access controls, logging, vendor review, and operational safeguards intended to reduce unnecessary retention of uploaded files and outputs.

Even so, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

7. Do-Not-Track Signals

Some web browsers offer a "Do Not Track" ("DNT") setting. Because there is no universally accepted standard for how to interpret DNT signals, we do not currently respond to browser-initiated DNT signals.

8. How Your Information Will Be Stored and Transferred

Your information may be stored and processed in countries where we or our service providers operate, including the United States and other jurisdictions that may have data protection laws different from those in your country of residence.

By using the Services, you understand that your information may be transferred to and processed in these jurisdictions. Where required by law, we take reasonable steps to implement appropriate safeguards for international transfers.

We also maintain data retention and deletion practices intended to limit long-term storage of uploaded files and generated outputs where operationally feasible, though some information may be retained longer when required for legal, security, billing, dispute resolution, or legitimate business purposes.

9. Your Rights

Depending on where you live, you may have certain rights regarding your personal information, subject to applicable law. These rights may include the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your personal information in certain circumstances.
• Restrict or object to certain processing activities.
• Receive a portable copy of certain information.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact us using the details in Section 12 below. We may need to verify your identity before fulfilling your request.

10. Supplemental Terms for Certain Regions

10.1. California Residents

If you are a California resident, you may have rights under the CCPA and CPRA, including rights to know, access, correct, and delete certain personal information, as well as the right not to be discriminated against for exercising applicable privacy rights. We do not "sell" or "share" personal information as those terms are defined under the CPRA, and we do not use or disclose sensitive personal information for purposes that would require a right to limit under the CPRA, except as permitted by law.

10.2. Residents in Europe

If you are located in Europe, we generally process personal information on the basis of performing our contract with you, complying with legal obligations, protecting legitimate interests, or relying on consent where required. When we transfer personal information outside Europe to jurisdictions that have not been found adequate by the European Commission, we implement appropriate safeguards such as Standard Contractual Clauses where required.

11. How the Policy Will Be Updated

We may update this Policy from time to time. If we make material changes, we will revise the "Last Updated" date at the top of this page and may provide additional notice where required by applicable law. Your continued use of the Services after an updated Policy becomes effective means that the updated Policy will apply to your use of the Services.

12. How to Contact Us

If you have questions about this Policy or our privacy practices, please contact us at [email protected].