Privacy Policy

Last updated: 11 June 2026

1. What we collect

• Source uploads - license front, license back, face photo, and holder confirmation files you submit after payment, stored encrypted in Cloudflare R2 when live storage is configured.
• Extracted fields - name, license number, issuing country, dates, categories, and (when present on the license) date of birth and address.
• Account & order data - email, orders, payment references (card details never touch our servers; Stripe processes payments).
• Passwordless access data - hashed one-time login tokens, token expiry, signed session cookies, and non-PII audit events used to protect dashboard access. We do not store account passwords.
• Usage analytics - privacy-respecting product analytics (PostHog) and optional GA4.

2. Why we collect it

Solely to provide the service: extracting, translating, and producing your documents; fulfilling certified orders; support; and legally required record-keeping. We never sell personal data.

3. Retention & deletion

• Uploads are deleted automatically 30 days after upload.
• You can delete source uploads, extracted data, and drafts from your email-verified dashboard.
• Deletion requests cascade to backups within 7 days.
• Issued packs, order references, payment references, and accounting records may be retained when needed for download access, fraud prevention, tax, dispute, or legal obligations.
• Access to personal data is audit-logged without placing license numbers, source photos, or checkout emails in public URLs.

4. Where data lives

Infrastructure runs on Cloudflare (Workers, D1, R2) with encryption in transit and at rest. Reviewer access to source evidence is limited to preparing or correcting your watermarked translation pack.

5. Your rights

Access, correction, deletion, and portability requests: contact us. We respond within 30 days.

6. Cookies

Essential cookies for sessions and security (Turnstile); analytics only with consent where required.