Privacy Policy

Last updated: June 30, 2026

The short version

What we collect

When you create an account, we collect the information you provide during sign-up:

• Email address: used for account login and to contact you about your account.
• Name (if provided): displayed in your account profile.
• Authentication data: managed by our authentication provider, Clerk, and used solely to keep you signed in.
• Usage count: we track how many documents you redact each month to enforce the free-tier limit. This is stored as a simple counter keyed by your user ID — no document content, filenames, or detection results are recorded.

What we don’t collect

We do not collect, store, access, or transmit:

• Your PDF files or any document content
• Text extracted from your documents
• Detection results (names, emails, addresses, etc.)
• Redacted output files

There is no server-side document processing. The detection model runs locally in your browser and is cached after the first load.

Analytics

We use Vercel Analytics to collect anonymised, aggregate page-view data (page URL, referrer, browser type, country). This data contains no personal identifiers and cannot be linked back to individual users. Vercel Analytics does not use cookies for tracking.

Cookies and local storage

We use a small number of cookies and browser storage mechanisms:

• Session cookie: set by Clerk for authentication. Expires when your session ends or after a period of inactivity.
• Model cache: the detection model is stored locally in your browser so it doesn’t need to be re-downloaded on every visit.

We do not use any third-party tracking cookies, advertising pixels, or analytics cookies.

Third-party services

We use the following services, each of which has its own privacy policy:

• Clerk: authentication and account management.
• Vercel: hosting and anonymised analytics.
• Hugging Face: hosts the machine learning model files that are downloaded to your browser.
• Upstash: stores monthly document usage counts, keyed by user ID. No document data is stored.

Data retention

Your account data (email, name) is retained for as long as you have an account. You can delete your account at any time through your account settings, which removes your data from our authentication provider.

Document data is never retained because it never leaves your device in the first place.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us. You can also delete your account directly through your account settings.

Changes to this policy

We’ll update this page if our practices change. Material changes will be noted by updating the date at the top of this page.

Contact

Questions about this policy? Email us at info@callix.dev.