Privacy Policy

Last updated: 20 May 2026

This Privacy Policy describes how Inputo (“we”, “us”, “our”), operated at inputo.app, collects, uses and protects personal data when you use our document data extraction service.

1. Data controller

Inputo is the data controller for personal data processed through the service. For privacy requests, contact us at support@inputo.app.

2. Data we collect

• Account data: email address and authentication identifiers when you register or sign in (via Supabase Auth).
• Documents you upload: PDF, Word, image or template files you submit for text extraction, data extraction or form filling.
• Usage data: plan type, remaining uses and related billing metadata stored in our database.
• Payment data: payments are processed by Stripe; we do not store full card numbers on our servers.
• Analytics and cookies: if you accept cookies on our website, Google Analytics (measurement) and, on the landing page only, Google AdSense may set cookies and collect usage data.
• Technical data: IP address, browser type and similar logs that may be generated by our hosting infrastructure or third-party services.

3. How we use your data

• To provide the service: authenticate you, process documents with AI/OCR, generate exports and filled documents.
• To manage subscriptions and one-time purchases (Stripe).
• To enforce usage limits per plan.
• To improve reliability, security and product quality (aggregated analytics, where consented).
• To respond to support requests and legal obligations.

4. Document storage

We do not permanently store your uploaded documents. Files are processed in memory (or temporary server storage for the duration of the request) and are deleted after processing completes. Extracted data is returned to your browser session; we do not maintain a long-term archive of your document contents unless you explicitly save exports on your own device.

5. Third-party processors

• Supabase — authentication and user usage records.
• Stripe — payment processing.
• Anthropic (Claude) — AI extraction of structured data from document text you submit.
• Google Analytics — website analytics (only with your cookie consent).
• Google AdSense — advertising on the public landing page (only with your cookie consent).

These providers process data under their own terms and, where applicable, as data processors under agreements consistent with applicable law.

6. Legal basis (GDPR)

Where the GDPR applies, we rely on: performance of a contract (providing the service), legitimate interests (security, fraud prevention, product improvement), consent (non-essential cookies and marketing analytics/ads), and legal obligation where required.

7. Retention

Account and billing-related records are kept while your account is active and as needed for tax, accounting and dispute resolution. Analytics data retained by Google is governed by Google’s policies. You may request deletion of your account data by contacting us.

8. Your rights

If you are in the EEA, UK or similar jurisdictions, you may have the right to access, rectify, erase, restrict processing, object, data portability and to withdraw consent (for consent-based processing). You may lodge a complaint with your local supervisory authority. To exercise your rights, email support@inputo.app.

9. International transfers

Some subprocessors may process data outside your country. We use providers that offer appropriate safeguards where required by law.

10. Security

We apply technical and organisational measures appropriate to the risk, including HTTPS, access controls and limiting retention of uploaded files. No method of transmission over the Internet is 100% secure.

11. Children

The service is not directed at children under 16. We do not knowingly collect their personal data.

12. Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use after changes constitutes notice of the updated policy where permitted by law.

13. Contact

Questions about this policy: support@inputo.app