Legal · Last updated October 11, 2026
Privacy policy.
Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights.
Data Controller
ScanThisText is operated by Blue Mint Technologies LLC. For any privacy-related inquiries, contact us at support@scanthistext.com. This policy applies to all data collected through our website, Android app, and related services (collectively, "the Service").
Your Data Protection Promise
- We do NOT keep the scans in your account once it is deleted. We store the images you scan on the web, and their text, so your history works. Delete a scan and it leaves your history at once; delete your account and, after a grace period, its scans, text and files are erased (older Android uploads are covered under Data Retention).
- We do NOT sell your personal data to third parties, ever.
- We do NOT read your documents unless you ask us to, for example in a support request, or the law requires it. They are processed automatically, and our admin tools show only details such as dates and file sizes, never your images or text.
- We do NOT use your documents to train AI models. We process them only to provide the Service: text extraction, analysis and the features of your plan, such as search and Ask.
Information We Collect
Data You Provide
- Images and documents you upload for OCR processing, and the text extracted from them (stored with your scans; see Data Retention)
- Account information — email address, display name, and account preferences
- Business records — invoices, customers (names, emails, phone numbers, addresses, tax IDs), business profiles and payment settings you add with our invoicing and Business features
- Support communications — messages you send to our support team
- Account deletion feedback — optional reason provided when deleting your account
Data Collected Automatically
- Device and network information — IP address, approximate location (country, region, city) when our hosting passes it on, browser type, operating system, device model, screen resolution
- Usage data — features used, scan frequency, error logs, timestamps
- Analytics data — page views, feature use, session duration and referral sources, which can be linked to your account and email address
- Cookies and local storage — for sign-in, preferences, consent tracking, and analytics (PostHog keeps an identifier in a cookie for up to a year)
Mobile App Data
- Camera access — only when you actively use the scan feature; we never access your camera in the background
- Photo library access — only when you choose to select an existing image for scanning
- Local storage — scan history and preferences stored on your device
How We Use Your Data
- Provide our Service — Process your uploaded documents using AI-powered OCR and return extracted text and analysis
- Improve our services — Analyze usage patterns to enhance accuracy, performance, and user experience
- Manage your account — Authenticate your identity, manage subscriptions, and enforce plan limits
- Communicate with you — Send account and deletion notices, product emails based on how you use the Service (each with an unsubscribe link), and replies to support requests
- Process payments — Facilitate subscription billing through our payment processor
- Ensure security — Detect fraud, abuse, and protect our systems and users
- Legal compliance — Comply with applicable laws, regulations, and legal processes
Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), UK, or Switzerland, we process your personal data on the following legal bases:
- Contract performance — Processing necessary to provide the Service you requested (document scanning, account management)
- Legitimate interests — Analytics, fraud prevention, and service improvement, balanced against your privacy rights
- Consent — Where required, which you may withdraw at any time. Product and marketing emails are sent unless you opt out, and each one has a one-click unsubscribe link
- Legal obligation — Where processing is required to comply with applicable law
Data Retention
| Data Type | Retention Period |
|---|---|
| Uploaded files | The original image of a scan is kept so you can open it again: 30 days on Free, 1 year on Pro, 2 years on Pro + AI, and for as long as the account exists on Business and Enterprise. Business documents and their files are kept until the account or team is deleted. A scan's text stays in your history either way, and everything is erased when the account or team that owns it is deleted. Images the Android app sends are read in memory and not kept; the ones it sent until October 2026 were stored without a link to any account, so they can't be matched to yours. |
| Scans, documents and their text | Shown in your history until you delete them, or for 30 days on the Free plan (paid plans: no limit while you're subscribed). Scans that leave your history are erased for good when your account is deleted, if not sooner. Scans made without signing in are kept the same way under an anonymous record for your browser; sign in to see or delete them. Business documents you delete are hidden at once but kept until the account or team that owns them is deleted. |
| Account information | Until account deletion + 30-day grace period (14 days when we delete it at your emailed request) |
| Usage analytics | Kept under our analytics providers' retention settings |
| Payment/billing records | Kept after account deletion for tax and accounting purposes |
| Support communications | Kept in our support inbox, attachments included, until you ask us to delete them |
Zero Ads — No Exceptions
We believe your experience matters more than ad revenue. ScanThisText will never display advertisements on any platform — web or mobile.
- • No banner ads — ever
- • No video ads — ever
- • No sponsored content — ever
- • No selling your data to advertisers — ever
- • No ad tracking or ad profiling — ever
We sustain the Service through paid subscription plans. Your scanned content is never sold or shared with advertisers. It goes to the providers that process it for us, and to apps and teammates you choose to share it with.
Third-Party Service Providers
We use trusted third-party service providers to operate the Service, for these purposes:
- • AI processing providers — Google Cloud (text recognition and translation), Anthropic (field extraction and Ask answers), Microsoft Azure (business document extraction) and Voyage AI (Ask search). Each receives the images or text it processes. We do not use your document content to train AI models.
- • Payment processors — For secure subscription billing. We never store your full credit card number; all payment data is handled under PCI DSS compliance.
- • Cloud infrastructure providers — Railway (our servers and databases), Vercel (this website) and Amazon Web Services (file storage). Google Maps suggests addresses as you type one into a business profile or customer form.
- • Email service providers — Resend, for account emails (password resets, deletion notices), contact-form messages, product emails you can unsubscribe from, and invoices you send to your customers.
- • Analytics and monitoring providers — PostHog and Plausible for usage statistics, Sentry for error and performance monitoring. PostHog can link your usage to your account and email address, and an error report can include the data being handled when the error happened, such as part of a request or a document's text.
These providers handle your data under their own terms. We do not use any advertising networks.
Account Deletion Process
You can delete your account at any time from the Settings page on both the web app and mobile app, or by emailing support@scanthistext.com. When you request deletion:
- Your account is immediately deactivated and can't be signed into or used
- Paid subscriptions bought on our website stop renewing immediately and end when the account is deleted. For subscriptions bought through Google Play, we ask Google to stop them too, but please also cancel them in Google Play to be sure
- Your data enters a 30-day grace period (14 days when we delete your account at your emailed request). We email the address on your account, if it has one, with the exact date and a link to keep your account; until that date you can also contact support to recover it
- When the grace period ends, your account and its content — scans, extracted text, uploaded files, translations and invoices — are permanently deleted, and the remaining personally identifiable information is anonymized. If an invoice payment is still processing, a Google Play subscription is still renewing, a team you own still has other members or the account is blocked, we finish once that is resolved. Copies in caches, logs and backups aren't deleted one by one; they expire on their own schedule, and copies you sent to other apps, such as QuickBooks, stay there. Images the Android app sent until October 2026 were stored without a link to any account, so they can't be found and deleted with it
- Billing records are retained as required by law
Your Rights (GDPR, CCPA & Global)
Depending on your location, you have the following rights regarding your personal data:
- Access — Request a copy of your personal data we hold
- Correction — Request correction of inaccurate personal data
- Deletion — Request deletion of your data at any time (account settings or by contacting us)
- Portability — Export your data in a standard, machine-readable format
- Restriction — Request that we limit how we process your data
- Objection — Object to processing based on legitimate interests
- Withdraw consent — Where processing is based on consent, withdraw it at any time without affecting prior processing
To exercise any of these rights, use our Data Subject Request form or email support@scanthistext.com. We will respond within 30 days (or sooner as required by law).
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know — what personal information we collect, use, disclose, and sell
- Right to delete — request deletion of your personal information
- Right to non-discrimination — we will not discriminate against you for exercising your rights
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes beyond what is necessary to provide the Service.
Children's Privacy
The Service is not intended for children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal information from children under these age thresholds. If we discover that we have inadvertently collected data from a child under the applicable minimum age, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at support@scanthistext.com.
International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. When we transfer data outside of the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms. By using the Service, you acknowledge and consent to the transfer and processing of your data in the United States.
Data Security & Breach Notification
We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encrypted storage for uploaded files, hashed passwords, optional two-factor sign-in, and automated dependency security audits. However, no method of transmission over the internet is 100% secure.
In the event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify affected users via email within 72 hours of becoming aware of the breach
- Report the breach to relevant supervisory authorities as required by law
- Provide details on what data was affected and steps you can take to protect yourself
Payment Information
All payment processing is handled by a PCI DSS Level 1 certified payment processor. We never receive, store, or have access to your full credit card number. We only store a reference to your payment account and basic subscription metadata (plan type, billing dates, payment status) necessary to manage your account.
Changes to This Policy
We reserve the right to modify, update, or replace this Privacy Policy at any time, at our sole discretion. Changes may reflect new data practices, legal requirements, third-party service changes, or other operational needs.
When we make material changes, we will: (a) update the "Last updated" date at the top of this page; (b) notify registered users via email at least 14 days before the changes take effect, except where changes are required by law.
Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree, you must stop using the Service and may delete your account. We encourage you to periodically review this policy.
Trademarks
- Stripe is a trademark of Stripe, Inc.
- Visa is a trademark of Visa Inc.
- Mastercard is a trademark of Mastercard International Incorporated.
- American Express is a trademark of American Express Company.
- QuickBooks is a trademark of Intuit Inc.
- Zapier is a trademark of Zapier, Inc.
ScanThisText has no affiliation with these companies. Each mark belongs to its owner and appears here only to identify a service we use.
Privacy Questions?
Contact us at support@scanthistext.com
EEA residents may also lodge a complaint with your local data protection authority.
View Terms of Service →