1. Introduction
Welcome to eScanX ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document processing services.
2. Information We Collect
2.1 Information You Provide to Us
- Account information (name, email address, password)
- Payment information (processed securely through Stripe)
- Documents you upload for processing
- Communications with our support team
2.2 Information Collected Automatically
- IP addresses and device information
- Browser type and operating system
- Usage data and analytics (via Google Analytics)
- API usage statistics
3. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Process your documents using OCR technology
- Process payments and prevent fraud
- Send service-related communications
- Improve our services and develop new features
- Comply with legal obligations
4. Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption in transit (TLS/SSL) and at rest
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- Documents stored securely on AWS S3 with encryption
- Payment data handled exclusively by PCI-compliant Stripe
5. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
Uploaded documents are retained for 30 days for paid users and deleted immediately for demo users.
6. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to our processing of your data
To exercise these rights, contact us at support@erichsol.com
7. Cookies and Tracking
We use cookies and similar tracking technologies to:
- Maintain your session and authentication
- Remember your preferences
- Analyze usage patterns (Google Analytics)
- Prevent fraud and abuse (reCAPTCHA)
You can control cookies through your browser settings.
8. Third-Party Services
We use the following third-party services that may collect data:
- Stripe: Payment processing
- AWS: Cloud infrastructure and storage
- Google Analytics: Usage analytics
- Google reCAPTCHA: Spam and abuse prevention
- Vercel: Website hosting
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission.
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our website. Your continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
- Email: support@erichsol.com
- Address: Erichsol Oy, Finland
- Data Protection Officer: support@erichsol.com