We're an independent product and don't yet hold formal certifications like SOC 2 or ISO 27001. Rather than claim what we don't have, this page sets out precisely how your data is handled so you can judge it for yourself. Questions, or a data-processing agreement? Email aixtractor@gmail.com.
What we store
- We do not keep the original file you upload.
- By default, we store a rendered image of each page plus the extracted data, tied to your account, so you can reopen a past run and see each value on the page.
- You can turn storage off entirely — new extractions are then processed and returned but never stored, so no history or page previews are kept.
- You can delete any single run, or all of your data, at any time from your profile.
Access & isolation
- Every request is authenticated with a signed token tied to your account; identity is never taken from a value the browser can set.
- Row-level security in the database means one account cannot read another account’s data, even if something upstream went wrong.
- Result webhooks are scoped to the account that created the run, so your data only ever goes to your own endpoints.
- Payment details are handled entirely by Razorpay — we never see or store your card information.
Encryption
- All traffic is encrypted in transit with HTTPS/TLS.
- Data at rest is encrypted by our infrastructure providers (Google Cloud and Supabase).
How extraction works
- To read a document, each page is sent to Google’s Gemini API, which returns the extracted text and structure.
- We do not use your documents to train any models of our own.
- Google’s handling of data sent to its API is governed by the Google APIs terms that apply to our account.
- There is no third-party human review of your documents.
Your controls
Delete
Remove a single run (and its stored page images) from the Runs page, or wipe all of your data from your profile. Deletions are immediate and permanent.
Turn off storage
Switch off history retention in your profile and we store nothing from then on — you still get every result in the moment, with no run history kept.
Export
Download your extracted data as CSV, Excel or JSON at any time, so you're never locked in.
Close your account
Email aixtractor@gmail.com and we remove your account data within 30 days.
Sub-processors
| Provider | Purpose |
|---|---|
| Google Cloud | Backend hosting, and the Gemini API that performs extraction |
| Supabase | Database and authentication |
| Vercel | Frontend hosting and cookieless web analytics |
| Razorpay | Subscription payments |
Each provider has its own privacy and security terms. We share only the minimum data each needs to do its job.
Try it on your own documents
50 free pages every month. No card required.
See also our Privacy Policy and Terms of Service.