Account information: Email address, name, and password hash when you create an account.
Documents: Files you upload for extraction, classification, or transformation. These are processed to provide the Service and stored in your tenant's isolated storage.
Usage data: Page credit consumption, feature usage, and error logs for billing and service improvement.
We use your data to: provide and improve the Service, process billing, send transactional emails (extraction results, usage alerts), and diagnose technical issues. We do not sell your data to third parties.
Documents are processed by third-party AI services (LlamaIndex, Anthropic, Google) to perform extraction, classification, and transformation. These providers process your data under their respective data processing agreements. We do not use your documents to train AI models.
Data is stored on Supabase (managed PostgreSQL) with Row-Level Security ensuring tenant isolation. File storage uses Supabase Storage with per-tenant access controls. All data is encrypted in transit (TLS) and at rest.
Your documents and extraction results are retained for the duration of your account. You may delete individual extractions or your entire account at any time. Upon account deletion, all data is permanently removed within 30 days.
We use: Supabase (database/auth), Stripe (payments), Sentry (error tracking), Resend (email), LlamaIndex Cloud (document extraction), Anthropic (AI generation), and Google AI (embeddings/classification). Each processes only the minimum data necessary for their function.
You have the right to: access your data, correct inaccuracies, delete your data, export your data, and restrict processing. Contact us to exercise these rights.
For privacy questions or data requests, contact us at privacy@heddlestudio.io.