Privacy Notice

1. Controller

The data controller is Lopes Ushiki Cleiber. They determine how and why your personal data is processed.

2. What we collect

• Account data: email address, hashed password (or Google OAuth identifier), display name.
• Scan metadata (Pro/Business only): file name, original size, sanitized size, timestamp. We never store the PDF itself.
• Technical: IP address, browser user-agent, basic security/error logs.

Your PDFs never leave your browser. All sanitization runs locally via WebAssembly. We have no copy of your document content.

3. Purposes & legal basis

• Providing the Service (contract performance).
• Account security and fraud prevention (legitimate interests).
• Customer support (contract performance).
• Improvement of the Service via aggregated, non-identifying telemetry (legitimate interests).

4. Sharing

We share data with:

• Paddle — our Merchant of Record for sales, subscription management, payments, tax compliance and invoicing.
• Cloud infrastructure providers for hosting and authentication.
• Authorities where strictly required by law.

5. Retention

Account data is retained while your account is active. Scan history uses a rotating slot model — only your 10 most recent sanitization actions are stored (locally on Free, cloud-synced on Pro), and older entries are automatically overwritten. You can delete your account at any time via support.

6. Your rights

Subject to your jurisdiction, you have the right to access, rectify, erase, restrict or port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with your local supervisory authority. We respond within one month.

7. Security

We apply industry-standard technical and organisational measures including encryption in transit and at rest, scoped access controls and per-row access policies on stored data.

8. International transfers

Where personal data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses or adequacy decisions to ensure appropriate safeguards.