Privacy Policy
Last updated: April 13, 2026
What ScanMyDoc does
ScanMyDoc is a free document data extraction tool. You upload a document, our AI extracts structured data, and you download it as Excel, CSV, or JSON. No account required.
What we collect
We collect the absolute minimum needed to operate the service:
- Your document — uploaded temporarily for processing. Automatically deleted within 24 hours.
- Extraction results — stored temporarily so you can download them. Automatically deleted within 24 hours.
- Anonymous job metadata — document type detected, page count, processing time, file size, country code (from Cloudflare headers). No document content. No personally identifiable information.
- Session cookie — a random UUID stored in your browser to enforce the daily usage limit. Not linked to any personal information.
- IP address hash — a one-way hash of your IP logged for abuse monitoring. We cannot reverse this to your actual IP.
What we do NOT collect
- No email addresses, names, or personal information
- No document content is stored permanently
- No extracted data is stored permanently
- No tracking cookies or advertising profiles
- No third-party analytics that track individual users
How your documents are handled
- You upload a document to our server.
- The document is sent to Mistral AI for OCR (text extraction) and then for AI-powered data structuring.
- Results are returned to your browser and stored temporarily for download.
- Both the original document and extraction results are automatically deleted within 24 hours.
We use Cloudflare R2 for temporary storage with automated lifecycle rules that enforce deletion.
Third-party services
- Cloudflare — hosting, CDN, storage, and database. Cloudflare Privacy Policy
- Mistral AI — document OCR and AI-powered data extraction. Your document content is sent to Mistral for processing. Mistral Privacy Policy
- Google Fonts — font delivery (DM Sans). No cookies set. Google Fonts Privacy
Cookies
We use a single cookie:
- smd_session — a random UUID used solely for rate limiting (10 documents per day). Expires after 1 year.
SameSite=Strict. Not shared with any third party.
Data retention
| Data | Retention |
|---|---|
| Uploaded documents | 24 hours (auto-deleted) |
| Extraction results | 24 hours (auto-deleted) |
| Job metadata | Indefinite (anonymous, no PII) |
| Rate limit records | 7 days (auto-cleaned) |
Your rights
Since we don't collect personal information or require accounts, there is no personal data to access, correct, or delete. Your documents are automatically deleted within 24 hours.
Contact
Questions about this policy? Email us at [email protected].