Privacy Policy
Last updated: February 2026
1. Introduction
LeafXtract is an AI-powered SaaS platform for extracting structured product data from promotional PDF leaflets. We are committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains what information we collect, how we use it, how we protect it, and what rights you have regarding your data.
2. Information We Collect
We collect the following types of information when you use our platform:
- •Account information — your name, email address, and a securely hashed version of your password.
- •Uploaded content — PDF leaflets you upload, extracted product data, and generated page images.
- •Usage data — processing timestamps, API usage metrics, and feature usage analytics.
- •Technical data — browser type, IP address, and device information collected automatically during your visits.
- •AI interaction data — VLM API requests and responses generated during the extraction processing of your leaflets.
3. How We Use Your Data
We use the information we collect for the following purposes:
- •Processing and extracting product data from your uploaded leaflets.
- •Providing analytics and reporting on your extraction results.
- •Improving our AI extraction accuracy and overall service quality.
- •Account management and customer support.
- •Security monitoring and fraud prevention.
4. Data Storage & Security
We take the security of your data seriously and employ industry-standard measures to protect it:
- •Data is stored in encrypted PostgreSQL databases with strict access controls.
- •Files are stored in AWS S3 with server-side encryption (AES-256).
- •Passwords are hashed using bcrypt, a one-way hashing algorithm, and are never stored in plain text.
- •API keys are encrypted with Fernet symmetric encryption before being stored in our database.
- •Authentication is managed via JWT-based tokens with automatic rotation.
- •All data in transit is protected with HTTPS/TLS encryption.
5. Third-Party Data Sharing
We share data with third parties only when necessary to provide our service:
- •VLM providers (Anthropic Claude, OpenAI, Google Gemini) receive page images solely for the purpose of AI extraction processing.
- •Cloud infrastructure providers (AWS) host our platform and store your files.
- •We do not sell your data to third parties.
- •We do not use your data for training AI models.
6. Data Retention
We retain your data according to the following schedule:
- •Account data — retained while your account is active. Deleted upon request.
- •Uploaded leaflets and extracted data — retained until you delete them from the platform.
- •Processing logs — retained for 90 days, then automatically purged.
- •Export files — automatically deleted after 24 hours.
7. Your Rights
You have the following rights regarding your personal data:
- •Access — request a copy of all data we hold about you.
- •Export — download your data in CSV, Excel, or JSON format at any time.
- •Deletion — request deletion of your account and all associated data.
- •Correction — update or correct your personal information through your account settings.
- •Portability — export your data in standard, machine-readable formats.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you via the email address associated with your account. Continued use of the platform after such notification constitutes acceptance of the updated policy. We encourage you to review this page periodically.
10. Contact
For privacy-related inquiries, you can reach us via the contact form on our home page or by emailing info@leafxtract.com.
See also our Terms of Service.
Back to top