Privacy Policy

Last updated: 2026-11-07

Who is responsible for your data

EdgeExtract is operated by an individual developer trading as RedSugarTree — a self-employed sole trader, not a registered company. The operator's legal name and address are those supplied to Creem during merchant verification and shown on your payment receipt. For any privacy question or request, write to support@redsugartree.com.

What we collect

Account data — your email address, plan, subscription status and identifiers, quota counters, and an encrypted copy of your API key so you can retrieve it.
Documents you submit — the text, image or text-layer PDF you send for extraction. These are passed to Cloudflare Workers AI for inference and are not stored by us. Extraction results are returned to you in the API response and are not written to our database.
Usage data — per-request token counts and estimated cost, plus aggregate call counts, used for quota metering, cost accounting and abuse protection.
Technical data — your IP address, stored temporarily to enforce signup and key-retrieval rate limits and deleted automatically when the rate-limit window expires.
Payment audit data — payment event IDs and types, kept to prevent a transaction from provisioning an account twice.
Support correspondence — the address and content of any email you send us.

Why we process it

We process this data to provide the API you asked for (performance of a contract), to meter usage and bill correctly, to keep the service secure and prevent abuse (legitimate interests), and to meet legal obligations. Documents are never used to train models. We do not sell personal data, do not share it for advertising, and do not use it for automated decision-making with legal effects. This site has no analytics or marketing trackers.

Third parties

Cloudflare — hosting, Workers AI (Clairic) inference, D1 database and KV storage.
Resend — sends your transactional API-key email; it receives your email address and the message content, which may contain your API key.
Creem (Armitage Labs OÜ) — acts as the merchant of record for payments. It handles payment, billing, tax, invoicing and anti-fraud data as an independent controller under its own Privacy Notice, not merely on our behalf.

These providers may process data in jurisdictions other than your own. We use only the providers needed to run the service.

How long we keep it

Document contents and extraction results are not retained beyond the request that processes them. IP rate-limit records expire and are deleted automatically. Account, usage and payment audit records are kept while your account exists and as long as needed for accounting and dispute resolution, then deleted on request.

Your rights

You may request access to, correction of, export of, or deletion of your personal data, and object to or restrict processing. Email support@redsugartree.com — there is no form and no automated runaround, and we will action it. You also have the right to complain to your local data protection authority. Nothing in this policy limits statutory consumer rights.

Children

EdgeExtract is a developer tool and is not directed at children under 16. We do not knowingly collect their data.

Changes

If this policy changes materially we will update the date above and, where appropriate, notify account holders by email.