Legal

Trust starts with the fine print.

Our privacy, terms, and zero-retention commitments — in plain language.

Privacy Policy

ValidExtract processes documents solely to produce structured extraction results for the requesting user. We do not use, sell, or share document contents for any purpose other than completing the requested extraction.

Personally identifiable information collected at sign-up (name, email) is used only to administer your account and communicate with you about the service.

You may request deletion of your account and all associated extraction metadata at any time. Document files themselves are already purged automatically on extraction completion.

Terms of Service

By using ValidExtract you agree to use the service for lawful document processing only. You represent that you have the right to upload and process the documents you submit.

Extraction results are provided "as is" and are intended to assist — not replace — professional review. ValidExtract is not liable for decisions made solely on extracted data without verification against source documents.

Subscription plans renew automatically until cancelled. Usage limits reset each billing cycle. Overages are not charged; extraction is paused until the next cycle or a plan upgrade.

Zero-Retention SLA

Zero-Retention means: uploaded files are held only for the duration of an active extraction request. The moment extraction completes (success or failure), the file is deleted from storage and removed from working memory.

Extracted structured data and source citations are retained on your account so you can review and export them. The original file content is not retained — only the fields and citation references you asked us to return.

Files are never used to train, fine-tune, or evaluate any model. Processing infrastructure is isolated per request and encrypted in transit and at rest with AES-256.

Security & Compliance

Ten commitments, on every extraction.

Your documents are sensitive. Here is exactly how they are protected — by default, on every plan.

Zero-Retention

Files deleted the moment extraction completes.

AES-256 Encryption

Encrypted in transit and at rest.

HIPAA-Ready

PHI extracted and purged per request, never retained.

SOC 2 Type II

Hosted on SOC 2 Type II audited infrastructure.

Never Trains a Model

Documents never used for model training or tuning.

GDPR-Ready

Deletion and data-subject rights supported.

Per-Request Isolation

Each extraction runs in its own isolated process.

Encrypted Dropzone

Uploads enter through an encrypted channel.

Append-Only Audit Trail

Every extraction logged, immutable.

Cited, Defensible Exports

Every field carries its source citation.