Privacy Policy

Effective date: April 13, 2026

This Privacy Policy explains how SpecExtract ("we", "us", "our") collects, uses, and protects your information when you use our service. Please read it carefully.

1. Information We Collect

Account Information

When you register, we collect your email address and, optionally, your full name. This information is stored securely via Supabase and is used to authenticate you and communicate with you about your account.

Documents You Upload

When you upload engineering drawings, spec sheets, or other documents, the file is stored in Supabase Storage (hosted on AWS). The contents of your documents are transmitted to Anthropic's API for AI-powered analysis. Do not upload documents containing classified, export-controlled (ITAR/EAR), or highly sensitive information unless you have reviewed Anthropic's data handling policies.

Extracted Data

Structured data extracted from your documents (materials, dimensions, tolerances, etc.) is stored in our database associated with your account and the uploaded file.

Payment Information

We do not store credit card numbers or payment credentials. All billing is processed by Stripe, Inc. Stripe may retain payment data in accordance with their own privacy policy. We store your Stripe customer ID and subscription status to manage your plan.

Usage Data

We automatically collect limited technical data including your IP address, browser type, pages visited, and feature usage for the purpose of operating and improving the service.

2. How We Use Your Information

  • To provide and operate the SpecExtract service
  • To process your documents using AI (via Anthropic's API)
  • To manage your subscription and process payments via Stripe
  • To send transactional emails (account confirmation, billing receipts)
  • To respond to support requests
  • To detect and prevent fraud or abuse
  • To improve the accuracy and features of the service

We do not sell, rent, or trade your personal information or document data to third parties for marketing purposes.

3. Third-Party Services

We rely on the following third-party services to operate SpecExtract. Your data may be transmitted to or stored by these providers:

ServicePurposeData Shared
AnthropicAI document analysisDocument contents
SupabaseDatabase & file storageAccount data, documents
StripePayment processingEmail, billing info
VercelApplication hostingRequest logs, IP address

4. Data Retention

  • Your account data is retained for as long as your account is active.
  • Uploaded documents and extracted specs are retained until you delete them or close your account.
  • If you cancel your subscription, your data remains accessible on the free tier limits until you choose to delete it.
  • Upon account deletion, we will delete your personal data and uploaded files within 30 days, except where retention is required by law.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your account and associated data.
  • Portability: Request an export of your extracted spec data in JSON format.
  • Objection: Object to certain processing activities.

To exercise any of these rights, contact us at privacy@specextract.com.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including encrypted connections (TLS), row-level security on our database, and restricted access to production systems. However, no system is completely secure. You use the service at your own risk and should not upload documents you cannot afford to have compromised.

7. Cookies

We use session cookies strictly necessary for authentication. We do not use advertising or tracking cookies. No cookie consent banner is required as we only use essential cookies.

8. Children's Privacy

SpecExtract is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify you by email or by a prominent notice in the application. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact us at: privacy@specextract.com