Privacy Policy

Account information — When you create an account, we collect your name and email address.

Encrypted credentials — Your ERP credentials are encrypted using a key derived from your password. We cannot read or access these credentials.

Usage data — We track AI model usage (token counts per request) for billing purposes.

Audit logs — We log security-relevant events (logins, configuration changes, API calls) including IP address and user agent. These logs do not contain document content or business data.

Document content — Uploaded files are processed entirely in your browser and are never transmitted to or stored on our servers.

Extracted business data — Part numbers, pricing, line items, and other data extracted from your documents exist only in your browser session.

ERP transaction data — Records submitted to your ERP pass through our proxy but are never stored or logged.

To provide and maintain the Restful AI service.

To authenticate your identity and protect your account.

To track usage for billing and to enforce rate limits.

To detect and prevent security incidents via audit logging.

To communicate with you about your account or the service.

We do not sell your personal information.

We do not share your data with third parties for marketing purposes.

Your document content is sent to AI providers as part of the extraction process. We do not control how those providers handle data — please review their respective privacy policies.

We may disclose information if required by law or to protect the safety of our users.

All data in transit is encrypted via TLS.

Sensitive credentials are encrypted at rest using AES-256-GCM with zero-knowledge architecture.

Passwords are hashed using Argon2id, a memory-hard algorithm resistant to GPU-based attacks.

Access to production systems is restricted and monitored.

For full technical details, see our Security page.

Account data is retained for the duration of your account.

Audit logs are retained for compliance purposes.

If you delete your account, all associated data (including encrypted credentials, usage records, and audit logs) is permanently deleted.

You may request access to, correction of, or deletion of your personal data at any time by contacting us.

You may delete your account, which will permanently remove all stored data.

We may update this privacy policy from time to time. We will notify you of material changes via email or through the service.

If you have questions about this privacy policy, please contact us at restful-ai.com/contact.