Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how OmniOCR ("we", "us", or "our") handles information when you use the OmniOCR website and OCR workspace (the "Service").

1. Information we process

Account information

When you sign in with Google, we receive the account details needed to create and secure your OmniOCR account, such as your name, email address, profile image, provider account identifier, and session information. We do not receive your Google password.

Documents and OCR results

Files you submit are sent through our Cloudflare-hosted application to our current OCR provider, Zhipu AI's GLM-OCR service, for recognition. The provider receives the uploaded file and processes its contents to return the OCR result.

Our application database does not store the source file or recognized text. Recent result text, file metadata, and compact layout data may be stored locally in your browser so the workspace can restore your recent history. You can remove this data with the workspace's clear-history control or your browser controls.

Account, credit, and billing records

We store account, session, subscription, credit balance, credit transaction, and OCR charge records in Neon PostgreSQL. For anonymous daily credits, we store an HMAC-protected visitor identifier derived from network information, the UTC quota date, used credits, request identifiers, and provider usage. We do not store the raw IP address in the anonymous quota tables. These records do not contain the source document or recognized text.

Product feedback and subscription interest

When you voluntarily submit feedback after three completed OCR requests, we store the 1–5 star rating, review text, successful OCR count at the prompt, an account identifier or HMAC-protected anonymous visitor identifier, and the status of the 50-credit reward. The database stores only a hash of the one-time claim token. When a signed-in user clicks the unavailable subscription button, we store the account identifier, entry point, interface language, page path, and click time to assess paid demand. This click does not create an order or charge.

Payment information

Subscriptions are not currently open. If Creem checkout is enabled later, Creem may collect payment method, billing, tax, and transaction information under its own privacy policy. We will receive only the identifiers and status needed to manage subscriptions and issue credits. We do not store complete payment card numbers.

Technical and usage information

Cloudflare may process IP addresses, request metadata, security signals, and operational logs to deliver, protect, rate-limit, and assign anonymous daily credits for the Service. OmniOCR uses the first-party feedback and subscription-interest records described above to improve the product, but does not load Google Analytics, advertising trackers, or marketing trackers. See our Cookie Policy.

2. How we use information

We use information to provide OCR, authenticate accounts, maintain sessions, calculate and deduct credits, issue feedback rewards, analyze product feedback and subscription interest, prevent duplicate charges, enforce file and request limits, investigate failures, protect the Service, and meet legal obligations.

We do not sell personal information. We do not use uploaded documents or OCR results for advertising.

3. Service providers and international processing

We rely on Google for OAuth authentication, Cloudflare for application delivery and security, Neon for the application database, Creem for payments, and Zhipu AI/GLM-OCR for document recognition. These providers may process information in countries different from yours and under their own terms and privacy policies.

4. Retention

Account, ledger, feedback, subscription-interest, and security records are retained while needed to provide the Service, analyze demand, resolve disputes, prevent abuse, and comply with law. Uploaded files and OCR text are not persisted in our application database. Browser history and a pending feedback-reward claim token remain on your device until cleared, successfully claimed, or removed by browser storage limits.

5. Security

We use transport encryption, access controls, request validation, rate limits, and isolated production secrets. No online service can guarantee absolute security.

6. Your choices and rights

Depending on your location, you may request access to, correction of, deletion of, or a copy of your personal information, and may object to or restrict certain processing. To request account deletion or exercise a privacy right, contact us at the address below.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes

We may update this policy as the Service or applicable requirements change. The date above identifies the current version.

9. Contact

Email: support@omni-ocr.com

Website: https://omni-ocr.com