Privacy Policy & Cookie Notice

We collect personal information you voluntarily provide when you:

• Create an account or register for the Services (for example, name, email address, password, and workspace details);
• Sign in using a third-party identity provider such as Google;
• Subscribe to or purchase paid plans (billing name and contact details; payment card data is processed by our payment provider and is not stored on our servers);
• Upload documents or configure parsers, schemas, webhooks, and automations;
• Contact us for support, sales, or feedback (name, email, and message contents);
• Participate in surveys, beta programs, or marketing events; and
• Use interactive features that require you to submit content or preferences.

When you use AutoDocParse, you may upload documents and related files (for example, invoices, receipts, contracts, forms, and images). These files may contain personal information about you, your employees, customers, vendors, or other individuals. You are responsible for ensuring you have a lawful basis to upload and process such content.

We process uploaded content to extract structured data, run OCR where needed, generate confidence scores, route items for human review, deliver webhooks, and provide exports. Extracted results, audit metadata, and configuration data are stored in association with your workspace.

When you visit our website or use the Services, we and our service providers may automatically collect:

• Usage data — pages viewed, features used, API calls, parsing activity, and in-app actions;
• Device and technical data — IP address, browser type, operating system, device identifiers, and time zone;
• Log data — server access logs, error reports, referring URLs, and request timestamps;
• Approximate location inferred from IP address (country/region); and
• Cookie and similar tracking data (see Section 7).

• Authentication providers (for example, Google) when you choose social login;
• Payment processors when you complete a purchase or manage billing;
• Integration partners when you connect third-party systems to your workspace; and
• Referral or reseller partners, where applicable.

We do not knowingly collect biometric identifiers, genetic data, health information, or data revealing racial or ethnic origin, religious beliefs, or sexual orientation, except where contained in documents you upload and process at your direction, or as required by law.

• Creating, verifying, and managing accounts and workspaces;
• Processing documents, running AI extraction, OCR, review queues, and automations;
• Delivering APIs, webhooks, exports, and integrations;
• Processing subscriptions, credits, and billing;
• Providing technical support and responding to requests;
• Developing new features and improving accuracy, reliability, and performance; and
• Personalizing your experience within the Services.

• Sending transactional notices (account activity, billing, security alerts, and policy updates);
• Responding to support and sales inquiries; and
• Sending product updates or marketing communications where permitted by law, with an unsubscribe option in each marketing message.

• Detecting, investigating, and preventing unauthorized access, abuse, and fraud;
• Enforcing our Terms of Service and acceptable use policies;
• Complying with legal obligations, lawful requests, and record-keeping requirements; and
• Establishing, exercising, or defending legal claims.

• Measuring usage trends and service performance;
• Conducting research, surveys, and product testing; and
• Supporting finance, audit, planning, and compliance functions.

We use trusted third parties to operate the Services, including providers for:

• Cloud hosting and object storage (for example, Cloudflare R2 or compatible S3 storage);
• Database and caching infrastructure;
• AI model routing and inference (for example, OpenRouter and underlying model providers);
• Document OCR and digitization (for example, Sarvam AI, where enabled);
• Payment processing (for example, Dodo Payments);
• Outbound transactional email (for example, Resend) and inbound document ingestion (for example, SendGrid Inbound Parse);
• Authentication (for example, Google OAuth); and
• Security monitoring, logging, and customer support tools.

These providers may process personal information only to perform services for us and are subject to contractual data protection obligations. Enterprise customers may request a current subprocessor list and Data Processing Agreement (DPA).

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections and notice where required by law.

We may disclose personal information when we reasonably believe disclosure is necessary to comply with law, respond to lawful requests, enforce our agreements, protect rights and safety, or detect and prevent fraud or security incidents.

We do not sell personal information. Certain disclosures of cookie or usage data to analytics partners may be considered "sharing" for cross-context behavioral advertising under California law. Where applicable, California residents may opt out using the contact methods in Section 12. We honor Global Privacy Control (GPC) signals where required.

Cookies and similar technologies (pixels, local storage, and SDKs) help us operate the website and Services, remember preferences, measure performance, and — where permitted — support marketing.

• Use your browser settings to block or delete cookies (this may affect functionality);
• Opt out of interest-based advertising through industry tools such as NAI and DAA; and
• Contact us at support@autodocparse.com if you have questions about our use of cookies.

Where required by applicable law, we recognize and honor the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information for cross-context behavioral advertising.

Depending on your location, you may have the right to access, correct, delete, port, restrict, or object to certain processing of your personal information, and to opt out of sale, sharing, or targeted advertising where applicable.

Workspace owners and administrators can access, export, and delete much of their workspace data directly within the AutoDocParse application, subject to role permissions. For other requests, contact us using the details below.

• Email support@autodocparse.com with the subject line "Privacy Rights Request";
• Or email support@autodocparse.com for general privacy questions.

We may need to verify your identity before fulfilling a request. Authorized agents may submit requests on your behalf where permitted by law, with proof of authorization.

• California (CCPA/CPRA) — generally within 45 days, extendable by 45 days with notice;
• EEA/UK (GDPR) — generally within 30 days, extendable in complex cases;
• Canada (PIPEDA) — generally within 30 days; and
• Other U.S. state laws — generally within 45 days, subject to applicable extensions and appeal rights.

We will not discriminate against you for exercising privacy rights granted by applicable law.

• EU residents — your local data protection authority;
• UK residents — Information Commissioner's Office (ICO);
• Canadian residents — Office of the Privacy Commissioner of Canada;
• Quebec residents — Commission d'accès à l'information (CAI); and
• California residents — California Privacy Protection Agency.