Privacy Policy

This Privacy Policy describes how ExtractFlow (“we”, “us”) handles information when you use our website and services (the “Service”). By using the Service, you agree to this policy.

1. Information we collect

Account data. When you register or sign in, we collect identifiers such as your name, email address, and authentication credentials (including tokens when you use Google or other SSO providers).

Content you upload. Files you submit for processing (for example PDFs, ZIP archives, and extracted text or structured fields) are stored and processed to provide the Service.

Usage and technical data. We may collect logs, device or browser type, IP address, and similar data for security, debugging, and improvement of the Service.

AI and integrations. When you enable features that use third-party AI or cloud providers (such as Azure OpenAI) or Google (Sheets, Drive), content required for those features is sent to those providers according to their terms and privacy policies.

2. How we use information

We use the information above to:

• Provide, operate, and improve the Service;
• Authenticate users, enforce access controls, and prevent abuse;
• Communicate about your account or the Service where appropriate;
• Comply with law and protect our rights and users.

3. Sharing

We do not sell your personal information. We may share data with subprocessors that help us run the Service (hosting, databases, email if enabled, analytics, AI providers, Google APIs) under contractual safeguards. We may disclose information if required by law or to protect safety and security.

4. Retention

We retain information for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and configuration of your workspace.

5. Security

We implement reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. Contact your organization’s administrator or us using the details your deployment provides to exercise applicable rights.

7. International transfers

If you access the Service from outside the country where our servers or vendors operate, your information may be transferred and processed in those locations.

8. Children

The Service is not directed at children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

9. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and adjust the “Last updated” date.

10. Contact

For privacy questions related to this deployment, contact the operator of your ExtractFlow instance (your organization or the address published alongside this Service).