At FlexiScanner, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our web application. We follow security best practices to help keep your data safe and private.
Information We Collect
Account Information
Email address (for account creation and authentication)
Full name (for personalization and account management)
Password (encrypted and never stored in plain text)
Share activity you generate (e.g. share method and timestamp, for your own share statistics)
Usage counters for billing and plan limits (e.g. OCR/AI/conversion/share usage)
Security logs and authentication events
How We Use Your Information
Service Provision: To provide, maintain, and improve our PDF scanning services
Account Management: To create and manage your account, authenticate users
Document Processing: To process, store, and organize your PDF documents
Device Security: To detect compromised devices (jailbreak/root) and protect app access on mobile devices
Security: To protect against fraud, abuse, and security threats
Communication: To send important service updates and security notifications
Share Statistics & Plan Limits: To show you your own sharing activity and enforce billing/plan usage limits
Legal Compliance: To comply with applicable laws and regulations
Data Security & Protection
🛡️ Security is a Priority: We follow security best practices to help protect your data.
Security Measures
Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
Authentication: Secure authentication with session management
Access Control: Strict access controls and user permission systems
Monitoring: Automated rate limiting to help prevent abuse
Backups: Regular encrypted backups with disaster recovery procedures
Compliance: GDPR-aligned data practices
Data Protection Features
Brute force protection and rate limiting
Input validation and XSS prevention
Device integrity checks and jailbreak/root detection
Secure file upload validation
Regular security updates and patches
Data Sharing & Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
Service Providers: With trusted third-party services that help us operate our platform (cloud hosting and database, AI processing, payment/subscription processing, and cloud-import providers you connect, such as Google Drive, OneDrive, or Dropbox)
Legal Requirements: When required by law, court order, or government request
Safety & Security: To protect the rights, property, or safety of our users or others
Business Transfers: In connection with a merger, acquisition, or sale of assets (with user notification)
Consent: With your explicit consent for any other purpose
Your Privacy Rights
You have the following rights regarding your personal data:
Access: Request access to your personal data
Correction: Request correction of inaccurate or incomplete data
Deletion: Request complete deletion of your account and all personal data (available in Profile settings)
Portability: Request a copy of your data by contacting us at privacy@flexiscanner.com
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing based on legitimate interests
Withdrawal: Withdraw consent where processing is based on consent
Data Retention
Account Data: Deleted IMMEDIATELY upon account deletion request - no retention period
Document Data: All PDFs, folders, and organization data deleted IMMEDIATELY upon account deletion
AI Processing Data: Document summaries, classifications, and extracted data deleted IMMEDIATELY
Share Analytics: All sharing data and access logs deleted IMMEDIATELY with your account
User Profiles: Premium status, settings, and preferences deleted IMMEDIATELY
Usage & AI Request Logs: Deleted immediately upon account deletion
Converted File Exports: Deleted immediately upon account deletion
✅ GDPR-Aligned: We delete your data from our active systems immediately upon account deletion. Standard database backups may retain a copy for a limited time as part of our disaster-recovery process, and payment/subscription processors may retain transaction records as required for their own legal or accounting obligations.
Cookies & Tracking
We use only one type of cookie: an essential session cookie required to keep you signed in and to authenticate your requests. We do not use functional, analytics, advertising, or marketing cookies, and we do not use any third-party tracking or analytics services.
International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions, to protect your data during international transfers.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us: