Privacy Policy

Extracta is a service operated by AESMatias, an independent developer based in Chile ("we", "us"). We are the data controller for the personal data described here. For any question or request about your data, write to plutarco1677@gmail.com.

• Your account: email, name, a one-way hash of your password (never the password itself) and, if you use Google sign-in, your Google account identifier.
• Your documents: the PDFs you upload, deleted right after processing, and the data extracted from them. In process-only mode that data is kept for 1 hour and never written to a database; it is stored only if you choose to save it to your history.
• Usage and payments: the pages you process and when, your plan, the page packs you buy, and for each payment the status, amount, currency and PayPal's reference numbers. Card details are entered in PayPal's window and never reach our servers.
• Technical data: your IP address, used for a short time (up to one hour) in server memory to limit sign-in attempts and prevent abuse, and not stored in our database; and the standard request logs of our servers, kept for security and troubleshooting.

To extract the data, the text of your documents is sent to Google's Gemini API. We do not use your documents to train AI models. Google processes the text under its own terms and, depending on the service tier, may use it to improve its products.

Please do not upload documents with sensitive information you do not need to process (for example health data or passwords), and only upload other people's data when you have the right to.

We do not use advertising or analytics cookies, and we do not track you across other websites. Extracta only uses what it needs to work:

• a session cookie that keeps you signed in (and a separate one for the owner's admin panel, never set for visitors);
• your light or dark theme and your language, saved in your browser;
• your current batch of results, saved in your browser so a reload does not lose it;
• cookies PayPal sets in its payment window to prevent fraud.

Because these are strictly necessary, we do not ask for cookie consent.

• To provide the service you asked for: your account, processing your documents, your plan and your payments.
• To send you service emails: email confirmation, password resets and security notices. We do not send advertising.
• To meet legal obligations, such as keeping accounting and tax records.
• To keep the service secure and prevent abuse, which is our legitimate interest.

We never sell your data and we do not use it for advertising.

We only share data with the providers that run Extracta, and only what each one needs:

• Google (Gemini API): extracting the data of your documents; and Google Sign-In, only if you use it.
• Supabase: database hosting.
• PayPal: payment processing.
• An email delivery provider: sending service emails.
• Our server hosting provider.

We may also disclose data when required by law or by a court or public authority.

These providers may store and process data outside Chile, including in the United States and the European Union. They apply their own security measures and contractual safeguards for these transfers.

• PDF files: deleted right after processing; any left behind by an error are removed within hours.
• Process-only results: 1 hour.
• Saved documents: until you delete them or close your account.
• Account data: while your account is active, and deleted when you ask us to close it, unless the law requires us to keep something.
• Payment records: for the period required by tax and accounting law.

You can ask us at any time to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data, when we are not legally required to keep it;
• object to or restrict how we use it;
• receive a copy of it in a portable format (you can also export your documents to Excel, CSV or JSON yourself).

Write to plutarco1677@gmail.com from the email of your account. We reply within 30 days. You can also complain to the data protection or consumer authority of your country.

To delete your account and its data yourself, use the button on your account page or the form at /delete-account; requests sent by email are completed within 48 hours.

Data travels over encrypted connections (HTTPS), passwords are stored as slow salted hashes, each account can only reach its own data in the database, and card details are handled only by PayPal. No system is completely secure, but we take reasonable measures to protect your data and will notify you as the law requires if an incident affects it.

Extracta is intended for adults and businesses. We do not knowingly collect data from anyone under 18.

We may update this policy. The date at the top shows the latest version, and significant changes will be highlighted on the site or sent by email.