Privacy Policy

The short version: we do not see your documents.

DocRedact.in runs OCR, detection and export entirely in your browser tab. Your document is not uploaded to our infrastructure. First use downloads software and model assets from this site. Offline use depends on those assets already being loaded and available in your browser cache; loading the page alone does not guarantee it.

What we do collect

Basic request metadata: Cloudflare serves this site and handles IP addresses and browser request headers. We do not run analytics, advertising trackers or third-party scripts in the app. Waitlist requests use a short-lived IP-based rate limit to prevent abuse; IP addresses are not saved with waitlist entries.
If you use the B2B API waitlist form: your email, company name, and use-case selection. Stored in Cloudflare Workers KV with automatic expiration after 90 days. We use it only to contact you about the API. If email notifications are configured, Resend delivers a generic signup notice to our inbox; that notice does not include your email, company or use case.
If you email us: your email and message arrive in our inbox via Cloudflare Email Routing. We keep correspondence only as long as needed to respond. Do not attach identity documents.

What we never collect

Your documents, or any part of them.
OCR text extracted from your documents.
Detection coordinates, filenames, or file sizes of what you redact.
Advertising trackers or session replay.

Verify it yourself

Our full code is public on GitHub under AGPL-3.0: github.com/shadab127/doc-redact-in. Browser tests check network requests during detection and export, including same-origin requests and manual redaction. Open DevTools → Network and watch: you may see software downloads, but no request carrying your document. The tests cover specific fixtures and are regression checks, not a guarantee about every possible input.

Document memory in your tab

Navigation between automatic and manual redaction keeps the original document in this tab's memory so you can continue editing. Start over clears both modes and pending transfers and releases the document canvases. Reloading or closing the tab also ends the editing session. JavaScript cannot guarantee forensic erasure from browser or operating system memory. Downloaded PDFs remain on your device until you delete them.

Your rights

You can request deletion of any contact or waitlist data at any time by emailing hello@docredact.in. Because we never receive your documents, there is no document data to request deletion of — there was nothing to delete to begin with.

Contact information

Email correspondence and waitlist submissions are separate from document redaction. Only the information you explicitly submit is sent to our infrastructure. A future business integration is planned to keep document processing on the user's device; no server-side document API is currently offered.