Privacy Policy
What we collect, where it is processed, how long we keep it, and what we never do with it.
Who we are
VisionParse is operated by Senithu Software Solutions ("we", "us"), which is the data controller for this service.
VisionParse converts documents into text and structured data. This policy covers the website, the free tools, the web application and the API.
Documents you upload
Documents are processed on our own servers in Frankfurt, Germany. They are not sent to a third-party OCR service.
When you use an AI extraction feature, the page image and its extracted text are sent to Google’s Gemini API on the paid tier, under which Google does not use the content to train its models.
- Free tools, no account: files are deleted one hour after conversion.
- Account uploads: files and results are deleted 30 days after upload.
- We never use your documents to train models, our own or anyone else’s.
- We do not sell, rent or share your documents.
Account data
If you create an account we store your email address, authentication identifiers, organisation membership, and a usage record of how many pages and AI extractions you have consumed. Authentication is handled by Firebase Authentication.
Usage records are how we apply your plan limits and produce your invoices, so they are retained for as long as the account exists plus any period required for tax and accounting purposes.
Legal basis for processing
We process document content and account data to perform the contract you enter into when you use the service. We process limited technical data on the basis of legitimate interest, specifically to prevent abuse of the free tools and to keep the service available.
Marketing email is sent only where you have given separate, specific consent. Creating an account is not consent to marketing, and the consent checkbox is never pre-ticked.
Your rights
You can access, correct, export or delete your data at any time from your account, or by writing to us. You can also object to processing, request restriction, and withdraw marketing consent without affecting the service.
If you believe we have handled your data improperly you have the right to complain to your local supervisory authority.
Security
Traffic is encrypted in transit. Servers are key-only access with password authentication disabled, a default-deny firewall, and automated intrusion banning. Credentials are held outside the application repository with restricted file permissions.
No system is perfectly secure. If a breach affects your data we will notify you and the relevant authority without undue delay.
Contact
Questions about this document, or a request relating to your data, go to VisionParse@senithu.lk. We answer data requests within 30 days.