Data Storage and Deletion

Where Data Resides

Original files are stored in Cloudflare R2 object storage, read data and records in a Supabase database, applications on a Hetzner server. The transfer between them and to you is encrypted. Photos are stored reduced, PDFs and documents unchanged.

Retention Period

Documents are retained according to the plan at the time of upload: 30 days on Free, one year on Starter, five years on Business, and ten years on Scale. The date is available in the details of each document. After the retention period, the document is completely deleted — the original and the read data — and a record remains in the activity log showing which documents have disappeared. Documents pending review are not deleted.

This is intentional: the periods correspond to the archival obligations you have anyway, and keeping scans indefinitely would raise the costs for everyone. Those who need documents longer can download them, even in bulk with the originals.

Activity records are kept for one year. The OCR transcription and the input for the model are stored with the document and are deleted with it.

Deletion Upon Request

Deleted documents remain in the trash for seven days and then disappear along with the original; emptying the trash does this immediately. It is not possible to delete an entire account in the application — contact us.

Billing documents are retained by Stripe for the legal period. They do not contain your document content, only a record of whether and how much you paid.