How your documents are handled.

What happens when you choose a file

The browser reads the selected file, extracts text or runs OCR locally, and shows a preview and suggested fields. Reviewed copies and the CSV are assembled into a downloadable ZIP in your browser. The application does not automatically send document bytes, filenames, extracted text, client labels, merchants or amounts to a business server or an external AI provider.

Processing uses PDF.js, Tesseract.js and JSZip. OCR can make mistakes; local processing is not a guarantee of correct fields. Keep a copy of your originals and review every exported record.

The site still uses a network connection

Your browser downloads the application, PDF reader, OCR worker, language data and other static resources from this site. The sample button downloads fictional sample documents. Browser caching may retain application resources and language data. Pages also check this site’s configuration to find out whether optional measurement or feedback is available; this check does not send document data.

The hosting provider may receive ordinary web-request information such as IP address, browser information, requested resource and time. This is different from uploading document contents. This page does not promise that the host keeps no access logs or that the entire site works without a first network visit.

Temporary work and clearing

Selected files, extracted text, editable fields and previews are held for the current tab’s work. This beta does not intentionally save your document contents or reviewed fields to browser storage. Clearing the batch releases its working records and preview URLs. Refreshing, leaving or closing the tab clears your working edits.

Clearing a batch is not a forensic secure-erasure guarantee. Your original files, downloaded ZIPs, browser or operating-system records remain under your control. The ZIP is not encrypted; choose an appropriate storage and sharing method for sensitive records.

Optional product measurement

Measurement settings shows whether this deployment accepts optional measurement. Measurement starts only after you explicitly agree. You can use every workbench feature after declining or withdrawing. No history from before your agreement is sent later.

When both site availability and your consent permit it, events describe page visits, starting samples, adding a work batch, confirming a document, preparing a ZIP, reading failures and a feedback submission count. They contain fixed page/type/error categories, file-count ranges, registered campaign labels, timestamps and random event/session IDs. Document fields, file contents and names, full URLs, query strings, referral addresses and feedback text are excluded from these events.

Positive consent and a random short session reference are kept in this tab’s session storage. A session rotates after 30 minutes without measured activity or 24 hours total. No measurement cookie, fingerprint or cross-device identity is used. Withdrawing stops new events and clears the tab’s saved consent, but cannot recall events already received or immediately delete those server records.

Voluntary feedback and deletion

The feedback page shows whether this deployment accepts submissions. Sending form feedback is voluntary and does not require agreement to measurement. A submission sends only its category, the message you type and the notice version. It does not attach a document or copy any workbench fields.

Do not type receipts, filenames, extracted text, customer details, amounts, email addresses or other personal or financial information into feedback. Free text is not automatically guaranteed to be free of sensitive data. This form cannot send you a personal reply.

A confirmed submission returns a receipt and private deletion key. They are shown on the current page only; the application does not save them in browser storage or URLs. Keep both privately if you want to request deletion later. The deletion endpoint gives the same response for matching, wrong, absent, expired and already-deleted records, so its response does not reveal whether feedback existed.

Retention and infrastructure limits

When enabled, active tables have limits of 7 days for raw measurement events and form feedback, and 90 days for daily counts without event or session IDs. A valid feedback deletion request removes the matching active record.

Hosting access logs and recoverable backups have separate limits. A backup may still contain a record removed from the active database. If a backup is restored, the database must be checked and restored form feedback removed before it is put back into service.

Accounts and payment

This beta has no product accounts, checkout, third-party analytics or advertising scripts. It does not collect a mailing list or send marketing messages. Payment is not enabled.

Before using sensitive records

Use only documents you have permission to process. Follow your client’s requirements and your own device-security procedures. Do not use a shared or untrusted browser for confidential client work. If the beta’s limitations do not fit your workflow, use your existing approved process.

See supported files, limits and export details.

Contact

For product and privacy questions, email wuben154@gmail.com.