Privacy Policy

We collect information you provide directly to us and information generated through your use of JeScan.

Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service. We do not have access to your Google password.

Documents and files: Files you upload are stored encrypted on Cloudflare R2 object storage. Their content is processed by our AI pipeline (OCR and classification) and the extracted text and metadata are stored to enable search.

Usage data: We collect logs of actions performed within JeScan (uploads, searches, deletions) to power the activity journal feature and to improve the product.

Technical data: IP addresses, browser type, and device information collected automatically when you use JeScan.

We use the information we collect to:

- Provide, maintain, and improve JeScan - Process and store your documents securely - Run AI classification and metadata extraction on your files - Enforce storage and AI quota limits based on your plan - Send transactional emails (receipts, quota warnings, invitations) - Respond to support requests - Detect and prevent abuse or unauthorized access

We do not sell your personal data to third parties. We do not use your documents to train AI models.

Your files are stored on Cloudflare R2, a globally distributed object storage service. All files are stored with server-side encryption at rest.

Access to your documents is restricted through signed URLs that expire within 15 minutes. No document is publicly accessible without an explicit share link created by you.

Database records (metadata, tags, folder names) are stored in a PostgreSQL database hosted on our own infrastructure.

We implement industry-standard security practices including HTTPS for all communications, secure session management, and regular security reviews.

When you upload a document and AI processing is enabled for your plan, we send document content to Anthropic's Claude API for classification and metadata extraction.

Data sent to Anthropic is governed by Anthropic's data processing agreement. By default, Anthropic does not use API inputs to train their models.

OCR processing (text extraction from images/PDFs) may run client-side in your browser using Tesseract.js, or server-side depending on the document type. Client-side processing means the raw file bytes never leave your device before the text is extracted.

You can disable AI processing for any upload. Documents processed without AI will still be stored and searchable by filename.

We share your data only in the following limited circumstances:

Service providers: We use Cloudflare (storage), Anthropic (AI), Stripe (payments), and our hosting infrastructure. Each provider processes data only as needed to deliver the service.

Team workspaces: If you are part of a Team organization, your uploaded documents with Team visibility are accessible to other members of that organization according to their role.

Share links: Documents you explicitly share via a share link become accessible to anyone with that link until the link expires or is revoked.

Legal compliance: We may disclose information when required by law, court order, or to protect the rights and safety of JeScan and its users.

We never sell your data.

Documents moved to Trash are retained for 30 days before permanent deletion. You can permanently delete them sooner from the Trash view.

When you delete your account, all your documents, metadata, and personal information are permanently deleted within 30 days. Files stored in R2 are deleted immediately upon account deletion request.

For Team workspaces, documents owned by a departing member are transferred to the organization owner before deletion.

You can export all your data at any time from Settings → Account.

JeScan uses a minimal set of cookies and browser storage:

Session cookie: A secure, httpOnly cookie that keeps you signed in. It expires when you sign out or after 30 days of inactivity.

Preferences: UI preferences (language, theme) stored in localStorage. This data never leaves your browser.

We do not use advertising cookies or third-party tracking pixels.

Depending on your location, you may have the following rights regarding your personal data:

- Access: Request a copy of the personal data we hold about you - Correction: Request correction of inaccurate data - Deletion: Request deletion of your account and associated data - Portability: Export your documents and metadata in standard formats - Objection: Object to certain types of processing

To exercise any of these rights, contact us at privacy@jescan.me. We will respond within 30 days.

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice within the application at least 14 days before the changes take effect.

The "Last updated" date at the top of this page reflects the most recent revision. Continued use of JeScan after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@jescan.me Response time: We aim to respond within 2 business days.

For account-specific issues, you can also reach us through the in-app support chat.