Privacy Notice
Last updated: January 2025
Introduction
TextFlow ("we," "our," or "us") is committed to transparency about how we handle your data. This Privacy Notice explains what information we collect, how we use it, and your rights regarding your data when you use our document text extraction services.
Information We Collect
Account Information: Email address, name, and payment information when you create an account and Add Prepaid Usage.
Document Content: The documents you submit for text extraction, including invoices, receipts, and other files.
Usage Data: API request logs, timestamps, processing metrics, and region routing information for service optimization and billing.
Technical Data: IP addresses, browser type, and device information for security and analytics purposes.
How We Process Your Documents
To provide scalable, high-performance document text extraction, we utilize third-party infrastructure and AI services. Your document contents may be shared with:
- Amazon Web Services (AWS) — for distributed computing infrastructure and inference processing
- Anthropic — for advanced document understanding and text extraction models
We may also route document data to other first-tier providers as part of our continual improvement of services, including for model training, quality assurance, and infrastructure optimization. We select providers that maintain appropriate security and data handling standards.
Data Retention
Document Content: Documents are processed in real-time and are not stored beyond the duration necessary to complete the extraction request, typically seconds.
Request Metadata: Timestamps, latency metrics, and billing information are retained for up to 24 months for your Dashboard access and our operational needs.
Account Data: Retained for the duration of your account and as required by applicable law.
Data Security
We implement industry-standard security measures including TLS encryption for data in transit, secure API key authentication, and access controls. Our distributed infrastructure operates across 10 global regions with automatic failover and redundancy.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access and receive a copy of your personal data
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to or restrict certain processing activities
- Data portability where technically feasible
International Data Transfers
Our global infrastructure means your data may be processed in any of our 10 regional locations (São Paulo, Ashburn, San Jose, Chicago, Dallas, Paris, Tokyo, Sydney, Mumbai, Johannesburg). By using our services, you consent to the transfer of your data to these locations and to our third-party providers' facilities.
Changes to This Notice
We may update this Privacy Notice from time to time. We will notify you of material changes by posting the updated notice on our website and updating the "Last updated" date above.
Contact Us
If you have questions about this Privacy Notice or our data practices, please contact us at privacy@textflow.dev