Privacy Policy

Scope and contact

This policy covers the Textract OCR macOS app, the textractocr.com website, subscription verification services, and support requests. Textract OCR is the party responsible for the information described here.

Questions and privacy-rights requests can be sent to support@textractocr.com. Requests are reviewed and handled by a person; there is no automated rights-request portal.

Local OCR, translation, and documents

Screen captures, selected regions, recognized text, QR-code results, translation source and output, imported images and PDFs, generated Markdown, and local-model inference remain on your Mac. They are not uploaded to Textract OCR, Cloudflare, Hugging Face, or another server for OCR, translation, or document conversion.

Standard recognition uses macOS capabilities. Enhanced and Deep recognition use a model that runs locally. Translation uses Apple Translation available through macOS. Files are read only when you choose them, and exported results are written to locations you choose.

macOS permissions

Screen Recording lets the app read the screen region you actively select. Input Monitoring supports the global capture shortcut. These permissions do not give us remote access, and Textract does not continuously record the screen, log keystroke contents, or upload permission-derived content.

You can deny or revoke either permission in System Settings. Features that depend on a revoked permission will stop working until it is restored.

Local model downloads and Hugging Face

If you choose to install the enhanced OCR model, the app downloads model files from Hugging Face. Hugging Face may receive ordinary network request information such as your IP address, request time, requested file, and user-agent information under its own privacy terms.

Only model files are requested. Your screenshots, documents, recognized text, and translations are not sent to Hugging Face. After download, model inference runs on your Mac, and you can remove the model in the app.

Subscriptions and backend verification

Purchases and billing are handled by Apple. To verify Textract Pro and keep entitlement status current, the app sends our Cloudflare-hosted backend the App Store product, transaction, original-transaction, bundle, and environment identifiers; Apple-signed transaction information; and related status, purchase, expiration, renewal, grace-period, revocation, trial, notification, and synchronization information.

The backend verifies signed information with Apple, processes App Store Server Notifications, and stores the following in Cloudflare D1: Apple-signed transaction information; signed renewal information; signed App Store Server Notification payloads and their decoded data; transaction, original-transaction, and notification identifiers; product, environment, plan, trial, renewal, and status values; and dates or timestamps for purchase, expiration, renewal, refunds or revocation, grace periods, signed events, notification processing, and synchronization.

The backend returns a random anonymous access token to the app. The app stores the raw token in the macOS Keychain. Cloudflare D1 stores only its one-way hash, together with its creation and last-used timestamps. We do not receive your full payment-card details, Apple Account password, or Apple Account email address from this process.

Website, network logs, and support email

When you visit the website or subscription service, Cloudflare may process technical request data such as IP address, timestamp, requested URL, user agent, and security or diagnostic events to deliver and protect the service. We do not add third-party analytics or advertising pixels.

If you email support, Cloudflare Email Routing forwards the message to our destination mailbox, and Tencent/QQ Mail delivers and stores the support correspondence. We process your email address, message, attachments, and reply history to answer you. Please do not send screenshots or files containing sensitive content, raw access tokens, signed transaction data, passwords, payment-card information, or other secrets.

No account, analytics, or tracking cookies

Textract OCR does not require a Textract account. The website does not actively set cookies and does not use analytics, advertising trackers, behavioral profiling, or tracking cookies. We do not link local OCR activity to a subscription record.

Cloudflare may use strictly necessary security mechanisms when serving the site or API. Those mechanisms are not used by us to build advertising profiles.

Service providers and sharing

We do not sell or rent personal information. Apple processes purchases, subscription status, App Store notifications, and platform translation capabilities. Cloudflare hosts this website, the subscription API, security controls, and the D1 subscription database; Cloudflare Email Routing forwards support email. Hugging Face delivers optional model files. Tencent/QQ Mail receives, delivers, and stores support correspondence in the destination mailbox.

Each provider processes information for the stated purpose under its own terms and may process it in countries other than yours. We may also disclose limited information when legally required, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

Retention

Anonymous subscription access-token hashes are deleted after 30 days without use. Using a token to check status refreshes its last-used time. The raw token remains only in your Keychain until the app replaces it, you remove app data, or you delete it.

Subscription, transaction, renewal, and App Store notification records currently have no fixed automatic deletion date. We retain them as needed to provide and restore entitlements, handle support, maintain audit and fraud-prevention records, resolve disputes, and comply with law. Support email is kept as long as needed for the request and legitimate recordkeeping. Cloudflare and the email provider may keep limited logs or backups under their own schedules.

Why we process information

Where data-protection law requires a legal basis, we process subscription information and support correspondence to provide the service you request; security and limited technical data for our legitimate interests in protecting and operating the service; and records when needed to meet legal obligations. Where consent is required, you may withdraw it without affecting earlier processing.

Your choices and privacy rights

Depending on where you live, you may ask to access, correct, delete, restrict, or object to processing, receive a portable copy, withdraw consent, or complain to a data-protection authority. You can also revoke macOS permissions, delete downloaded models, manage or cancel a subscription through Apple, and delete local app data.

Email support@textractocr.com to make a rights request. A person will review it. To match a request to an anonymous subscription record, we ask only for the purchase proof strictly necessary and will provide a secure verification method when needed. Do not email an access token or signed transaction payload. We will respond within the period required by applicable law and explain if an exception applies.

Changes to this policy

We may update this policy when the app, providers, or legal requirements change. The date above shows the latest revision. Material changes will be presented through an appropriate channel before they take effect when required.