Privacy Policy

Effective date: April 22, 2026

This Privacy Policy explains how SpecExtract (“we”, “us”, “our”) — operated by Seth A Alexander — collects, uses, stores, and shares your information when you use our service. Please read it carefully before using SpecExtract.

1. Information We Collect

Account Information

When you register, we collect your email address and, optionally, your full name. This information is used to authenticate you, manage your account, and communicate with you about your subscription and the Service.

Documents You Upload

When you upload engineering drawings, specification sheets, or other technical documents, the file is stored in cloud storage (currently Supabase Storage, hosted on AWS infrastructure). The contents of your documents are transmitted to Anthropic's API for AI-powered analysis. You should not upload documents containing classified, export-controlled, ITAR-regulated, or other highly sensitive information unless you have independently determined that doing so is legally permitted and you have reviewed Anthropic's usage and data policies.

Extracted and Generated Data

Structured data extracted from your documents — such as materials, dimensions, tolerances, notes, and specifications — and AI chat responses are stored in our database associated with your account and the uploaded file.

Payment Information

We do not store credit card numbers or raw payment credentials. All billing is processed by Stripe, Inc. We receive and store only your Stripe customer ID and subscription status, which we use to manage your plan access.

Usage and Technical Data

We automatically collect limited technical information such as your IP address, browser type, pages visited, features used, error events, and timestamps. This data is used to operate, secure, and improve the Service.

2. How We Use Your Information

We process your information for the following purposes and on the following bases:

PurposeLawful basis
Provide and operate the ServiceContract (necessary to deliver what you signed up for)
Process AI document analysis via AnthropicContract / your explicit action of uploading
Manage your subscription and process payments via StripeContract / legal obligation
Send transactional emails (receipts, account confirmation)Contract / legitimate interest
Respond to support requestsLegitimate interest
Detect fraud, abuse, or security threatsLegitimate interest / legal obligation
Improve the accuracy and features of the Service (using aggregated, anonymised data only)Legitimate interest
Comply with applicable law and enforce our TermsLegal obligation / legitimate interest

We do not sell, rent, or trade your personal information or document data to third parties for marketing, advertising, or data brokerage purposes.

3. No AI Training on Your Content

We do not use your uploaded documents, extracted specification data, or AI chat content to train our own AI or machine learning models. Your document content is processed solely to provide the Service to you.

Document content is transmitted to Anthropic's API for analysis. Anthropic's handling of that data — including whether it is used for model improvement — is governed by Anthropic's own usage policies, terms of service, and privacy documentation. We encourage you to review Anthropic's policies if this is a concern. We operate under a commercial API arrangement with Anthropic, which generally limits use of API inputs for training; however, we make no independent guarantee of Anthropic's practices.

4. Third-Party Services

We rely on third-party infrastructure and service providers to operate SpecExtract. Your data may be transmitted to, processed by, or stored by these providers as a necessary part of delivering the Service. We are not responsible for the privacy, security, uptime, or data handling practices of these providers — their handling of your data is governed by their own terms of service and privacy policies.

ProviderPurposeData Shared
AnthropicAI document analysisDocument file contents, text
SupabaseDatabase & file storageAccount data, documents, extracted specs
StripePayment processingEmail address, billing information
VercelApplication hosting & deliveryRequest logs, IP address

We may add, change, or remove third-party providers as needed to operate the Service. Significant changes to how your data is shared will be reflected in an updated version of this Privacy Policy.

5. International Data Transfers

SpecExtract is operated from the United States. Your information — including documents you upload and personal data — may be processed, stored, or transferred to servers located in the United States or other jurisdictions where our infrastructure providers operate. Data protection laws in those jurisdictions may differ from the laws in your country. By using the Service, you acknowledge that your data may be transferred internationally as described in this policy. Where required by applicable law, we will take steps to ensure that such transfers are subject to appropriate safeguards.

6. Sensitive Documents and Confidential Content

You are solely responsible for determining whether you are authorised to upload, share, and process any document through the Service. In particular:

  • Do not upload classified, government-restricted, ITAR-controlled, EAR-controlled, or otherwise export-restricted technical data unless you have independently confirmed that doing so is legally permitted under all applicable laws and regulations.
  • Do not upload documents covered by confidentiality agreements, trade secret protections, or third-party intellectual property restrictions unless you have the right to share that content.
  • The Service is not represented or warranted as suitable, certified, or compliant for the processing of controlled, sensitive, or classified technical data. We provide no representation as to legal adequacy for any regulatory regime.
  • You should exercise caution and avoid uploading documents containing personal information of third parties (employees, customers) beyond what is necessary for your use case.

7. Data Retention

We retain your information for as long as needed to provide the Service and fulfil the purposes described in this policy:

  • Your account data is retained for as long as your account is active.
  • Uploaded documents and extracted specifications are retained until you delete them or close your account.
  • If you cancel a paid subscription, your data remains accessible under free-tier limits until you choose to delete it or close your account.
  • Upon account deletion, we will delete your personal data and uploaded files from active systems within 30 days.
  • Some data may remain in encrypted backups, audit logs, or archived systems for a further limited period. This data is not actively accessed and will be deleted or anonymised when those systems are purged.
  • We may retain certain data for longer periods where required by applicable law, or for legitimate business purposes such as billing records, fraud prevention, dispute resolution, or compliance obligations.

8. Data Security

We apply commercially reasonable administrative, technical, and organisational safeguards to protect your information from unauthorised access, disclosure, alteration, or destruction. These include encrypted connections (TLS/HTTPS), row-level security controls on our database, restricted access to production systems, and access controls on cloud storage. However, no method of data transmission or electronic storage is guaranteed to be completely secure. We cannot promise absolute security. You use the Service at your own risk and should exercise caution in deciding what documents and information you upload. Do not upload documents you cannot afford to have exposed in the event of a security incident. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at specextract@specextract.com. We will respond within a reasonable time and in accordance with applicable law.

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data and account. You may also delete individual documents at any time from your dashboard.
  • Portability: Request an export of your extracted specification data in a machine-readable format such as JSON.
  • Restriction: Request that we restrict processing of your personal data in certain circumstances.
  • Objection: Object to processing carried out on the basis of legitimate interests.
  • Withdrawal of consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Note that some of these rights may be subject to limitations under applicable law. We may need to verify your identity before acting on a request.

10. Cookies

We use only essential cookies that are strictly necessary for authentication, session management, security, and the core operation of the Service. These cookies cannot be disabled without impairing your ability to use the Service. We do not currently use advertising, tracking, analytics, or third-party marketing cookies. If we introduce non-essential cookies in the future, we will update this policy accordingly and, where required by applicable law, obtain your consent before setting them.

11. Business Transfers

If SpecExtract or Seth A Alexander is involved in a merger, acquisition, asset sale, financing event, reorganisation, or similar transaction, your personal information may be transferred to a successor or acquiring entity as part of that transaction. We will use reasonable efforts to ensure that any successor entity honours the privacy commitments made in this policy or provides you with equivalent protections. We will notify you via email or a prominent notice within the Service of any such change in ownership or control of your personal data, to the extent required by applicable law.

12. Children's Privacy

SpecExtract is not directed at or intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal data to us, please contact us at specextract@specextract.com and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify you by email to the address on your account, or by a prominent notice within the Service, at least 14 days before the changes take effect. The updated effective date will be shown at the top of this page. Your continued use of the Service after the effective date of any updated policy constitutes your acceptance of the changes. If you do not agree, you should stop using the Service and may request deletion of your account.

14. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us at:

SpecExtract (Seth A Alexander)
112 W Hopkins Ave
specextract@specextract.com