Information We Collect
We may collect the following categories of information:
- Google account information we receive when you sign in with Google: your name, email address, profile picture, and the Google account identifier for your account
- Contact information you provide, such as your email address if you contact us
- Account records, such as your remaining scan balance and your purchase history
- Uploaded files and related output files that you submit for scan processing
- Usage information, such as page views, feature usage, clicks, request timestamps, referrers, and diagnostic events
- Device and technical information, such as IP address, browser type, operating system, language, and approximate location inferred from IP
- Support messages and other communications you send to us
How We Use Information
We may use information we collect to:
- Create and maintain your account, and show you which Google account is currently signed in
- Keep track of your remaining scan balance and your purchases
- Operate, maintain, and improve the service
- Process uploads and generate clean scan outputs
- Provide customer support and respond to requests
- Monitor uptime, debug failures, prevent abuse, and maintain security
- Measure product usage and evaluate feature performance
- Send transactional messages such as service, support, or policy notices
- Comply with applicable law, legal process, or enforceable governmental requests
Google Sign-In And Google User Data
PhotoToScan uses Google Sign-In as its only sign-in method. When you sign in, we ask Google for the openid, email, and profile scopes. Those scopes give us your name, email address, profile picture, and the Google account identifier for your account — nothing else.
We use that information only to:
- Create your PhotoToScan account and sign you in on later visits
- Show you which Google account is currently signed in
- Attach your remaining scan balance and your purchase history to your account
- Send you transactional messages such as receipts and service notices
We do not request access to Google Drive, Gmail, Contacts, Calendar, Photos, or any other Google service, and we cannot read, write, or delete data in those services. We do not use Google user data for advertising, and we do not sell it.
PhotoToScan's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke PhotoToScan's access to your Google account at any time from your Google account permissions page. To delete your PhotoToScan account and the information we hold about it, contact us at privacy@phototoscan.com.
Uploads And Processed Files
PhotoToScan processes document photos and related files in order to generate clean scan outputs. Uploaded files and generated outputs may pass through infrastructure and service providers that help us host, process, store, secure, and deliver the service.
You should only upload files you are authorized to process. If you upload files that contain personal, confidential, financial, medical, legal, or other sensitive information, you are responsible for ensuring that you have the right to do so and that your use of the service complies with applicable law.
How We Share Information
We may disclose information in the following circumstances:
- To vendors and service providers that help us operate the service, such as hosting, infrastructure, scan processing, email, logging, and security providers
- To comply with law, regulation, legal process, or enforceable requests from public authorities
- To protect the rights, property, and safety of PhotoToScan, our users, or others
- In connection with a merger, financing, acquisition, bankruptcy, dissolution, or sale of all or part of our business or assets
- With your direction or consent
Our current service-provider categories include a hosting or infrastructure provider, our clean scan processing provider, our sign-in provider (Google), our payment processor (Stripe), and basic logging or security tooling used to run the service.
We do not send Google user data to any third party except as needed to operate the service in the ways described in this policy.
We do not sell personal information and do not share personal information for cross-context behavioral advertising.
Retention And Deletion
We keep information for as long as reasonably necessary to operate the service, complete processing requests, maintain security, resolve disputes, enforce agreements, and comply with legal obligations.
- Account information from Google Sign-In: We keep it for as long as your account is active, and delete it when you ask us to delete your account
- Uploads: We do not store user input data after processing is completed, except for temporary handling needed to process the request
- Processed outputs: We do not store generated output files after delivery is completed, except for temporary handling needed to provide the service
- Logs and analytics: We retain basic operational and product event logs only for as long as reasonably necessary to operate the service, maintain security, prevent abuse, and comply with legal obligations
We may delete files and related records earlier when they are no longer needed for the purposes described in this policy.
Cookies And Analytics
We use technical measures that help us understand basic product usage, such as page views, upload actions, and scan events.
We may use limited browser or server-side technical mechanisms that are reasonably necessary to operate the service, maintain sessions, prevent abuse, and analyze product performance.
Data Security
We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Children's Privacy
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us so we can review and delete the information if appropriate.
Your Choices And Rights
Depending on where you live, you may have rights to request access to, correction of, or deletion of certain personal information, or to object to or limit certain processing.
To submit a privacy request, contact us at privacy@phototoscan.com. We may need to verify your identity before responding.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date above and provide additional notice when appropriate.