Data Storage and Deletion
Where Data Resides
Original files are in Cloudflare R2 object storage, read data and records are in the Supabase database, application on Hetzner server. The transfer between them and to you is encrypted. Photos are stored reduced in size, PDFs and documents unchanged.
Retention Period
Documents are retained according to the plan at the moment of upload: 30 days on Free, 1 year on Starter, 5 years on Business, and 10 years on Scale. The date is in the details of each document. After the period expires, the document is completely deleted — both the original and the read data — and a record of which documents disappeared remains in the activity log. A document awaiting review is not deleted. A week in advance, an email will notify you of how many documents will be deleted and when, with a link to them in the report.
This is intentional: the timeframes correspond to the archiving obligations you already have, and retaining scans forever would increase the service cost for everyone. Those who need documents longer can download them, even in bulk along with the originals.
Activity records are retained for 1 year. The OCR transcription and input for the model are stored with the document and deleted with it.
Deletion on Request
A deleted document stays in the bin for 7 days and then disappears along with the original; emptying the bin does this immediately. The entire account in the application cannot be deleted — please contact us.
Billing documents are retained by Stripe for the legal period. They do not contain the content of your documents, only a record of that and how much you paid.