Privacy

• Your uploaded files, the data we extract from them and the spreadsheets we generate are deleted from our systems 24 hours after a job finishes.
• We never use your documents to train AI models, and we don't sell your data or use it for advertising.
• The pages you process are read by an AI provider (Anthropic), which keeps API data on its own systems for up to 30 days. That is separate from our 24-hour deletion and is explained below.

Mohamed Abdul Hameed (“we”) runs ClarifyMuch (the “service”), which you can use on the website and in our Android and iOS apps. This page explains what personal data the service handles and why, and applies to all of them. You can reach us at [email protected], or by post at M. Jeymuge, Malé, Maldives.

• Your email address, to sign you in with a one-time link or code (there are no passwords) and to contact you about your account, including a notification email when a job finishes.
• Your documents and what we make from them: the files you upload, the data extracted from them, and the XLSX and CSV files we generate. These can contain personal and financial information about you or other people. For bank statements we keep only the last four digits of an account number in the extracted data. In the mobile apps the camera is used only when you tap the scan button, and the photo is uploaded as a document; we don't access your photo library.
• Job records: the document type, page count, status, timestamps, the file name you gave it (removed when the file is deleted) and how many credits it used.
• Credit and payment records: your credit history and the amount, currency, status and reference of each payment. For purchases made in the iOS or Android apps we also keep the store's transaction identifier, so we can verify the purchase and reverse the credits if the store refunds it. We never receive card details or wallet keys.
• Device data (mobile apps): if you allow notifications, a push-notification token that identifies your device to the push service, so we can tell you when a job finishes. It is removed when you sign out or delete your account. The apps keep your sign-in session in the phone's private app storage.
• Technical data: how much AI processing each job used (token counts, so we can price the service), ordinary server logs, and information used to limit abuse such as upload and preview rates.
• Cookies (website): one cookie that keeps you signed in, and one short-lived security cookie set by our hosting network. We don't use advertising or analytics cookies. Details are in our cookie policy.

To provide the service (read your documents, check the numbers, produce and deliver your files), to keep credit balances and payments accurate, to protect the service against abuse and fraud, to give you support, and to meet legal obligations. We don't use your documents for anything else.

• Files, extracted data and generated spreadsheets: deleted 24 hours after a job finishes or fails. If you upload a document and never process it, it is deleted 24 hours after upload; an upload that never completes is removed within a couple of hours.
• Job records (type, page count, status, dates, credits used) are kept so you can see your history and we can account for credits, until you ask us to delete your account.
• Payment records are kept for as long as we need them for accounting and legal purposes; if you delete your account they are kept without any link to you. Credit and admin-adjustment records are deleted with your account.
• Admin action records (a log of manual credit adjustments we make, kept so balances can be explained) stay after your account is deleted, but your email address is removed from them.
• Backups made by our infrastructure provider may hold deleted records for a limited time after they leave our live systems.

• Supabase — our database, sign-in and file storage, hosted on Amazon Web Services in India (Mumbai region).
• Anthropic — its Claude API reads each page you process. Under Anthropic's commercial terms, data sent to the API is not used to train its models by default and is deleted from its systems within 30 days, except where longer retention is needed to enforce its usage policy. We don't control that retention, so the 24-hour deletion above applies to our own systems, not Anthropic's.
• Inngest — runs our background processing. It receives job and account identifiers, file locations and processing status, not the contents of your documents.
• DigitalOcean — hosts the web application and sees ordinary request data such as IP addresses.
• Cloudflare — provides our domain name service and, as part of DigitalOcean's hosting, the network that website traffic passes through. It sees IP addresses and request data and sets a short-lived security cookie.
• Plisio — processes credit purchases made on the website. When you buy credits there, it receives your order details and the payment amount; we don't receive or store your wallet address or transaction details beyond what it reports back to us.
• Apple and Google — process credit purchases made in the iOS and Android apps under their own terms and privacy policies, and deliver push notifications to your device. We receive the transaction identifier and product, not your payment details.
• Expo — relays push notifications from us to Apple and Google. It receives your push token and the short notification text (for example that a document is ready).
• Resend — sends sign-in emails and job-finished notifications on our behalf.
• Sentry (mobile apps only) — receives crash and error reports: the error, the device model and operating system, the app version, and an anonymous account identifier. It does not receive your documents, extracted data or email address.

Some of these providers process data in the United States and other countries, so your data may be transferred outside the country where you live.

• Your files are stored privately and are only ever reachable through short-lived links.
• Each account can only see its own documents, results and credit history.
• The admin tools we use for support show job metadata (status, page counts, dates), not your documents or extracted data.
• Sign-in uses one-time email links or codes rather than passwords.

No system is perfectly secure, and we can't guarantee that nothing will ever go wrong.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how it is used. You can delete your account yourself from the dashboard (“Delete my account”) or in the mobile app, or email us at [email protected]. Deleting removes your documents, results, job history, credits and device tokens; we keep only the payment records we are required to keep, detached from your account. If you are in the EU or UK you can also complain to your local data protection authority.

If your documents contain other people's personal data, we process it only on your behalf, to provide the service to you.

The service is for business use and isn't intended for anyone under 18.

If we change how we handle data we will update this page and its date, and tell you about significant changes.