Privacy Policy
Effective date: October 28, 2026
1. Who we are
The data controller for LongDoc OCR is LongDoc OCR (contact: support@unlimited-ocr2.com). Privacy questions: support@unlimited-ocr2.com.
2. Data we collect
- Account data: email address, name and profile image from your sign-in provider.
- Uploads: the PDF files and images you upload for conversion (see below for how long they are kept).
- Conversion results: the text and Markdown extracted from your documents.
- Documents you convert (OCR): the PDF or image you upload and the text extracted from it. Documents may contain personal data about you or other people; only upload documents you are allowed to share.
- Free daily documents: to enforce the daily free limits we store, per free document, a one-way hash of your IP address combined with the date (it cannot be linked across days), your account id if you are signed in, the page count and timestamps. If you arrive from an AI assistant (for example ChatGPT), a session cookie notes that, so we show a sample result instead of free documents.
- Payment metadata: order and subscription identifiers, amounts, currency, country and payment status. We never receive or store full card numbers; card data is handled by the payment processor (Waffo Pancake).
- Moderation records: the result of the automated keyword check on the extracted text (decision, category, job id and time), plus, for paid conversions, a record of the uploaded file with its fingerprint (SHA-256 hash); never the document or its text.
- Logs: IP address, device and browser information, and error logs needed to run and secure the Service.
3. Why we use it
To provide the Service and your credits (contract); to process payments, prevent fraud and abuse and enforce our Acceptable Use Policy (legitimate interests and legal obligations); to answer support requests; and, only if you agree, to send marketing emails.
4. Who we share it with
- OCR providers that convert your documents: Baidu AI Cloud.
- Document conversion (OCR) providers: see Who processes your files below.
- Payment processors: Waffo Pancake.
- Moderation services: an internal keyword list.
- Hosting and storage providers that run the Service (e.g. Cloudflare).
- Authorities, where required by law.
We do not sell your personal data.
Who processes your files
We use a third-party OCR provider to process your documents. The deletion times below apply to the copies we store. The provider's own copies are covered by its terms, and we cannot guarantee when the provider deletes them.
All files (current): at this stage, we send every document to Baidu AI Cloud (Beijing Baidu Netcom Science and Technology Co., Ltd.) for processing with the Unlimited OCR 2 model on servers in mainland China. Baidu's documentation says result links can last up to 30 days; in our tests they expired after about 3 days. We copy your result to our own storage as soon as we receive it, and we never give you Baidu's link. How long it keeps the original files it receives is governed by Baidu AI Cloud's own terms, which we cannot control. Baidu AI Cloud gives us no way to delete a file or a result. The result page shows which model processed your file.
How LongDoc OCR keeps its copies
| Our copy of your original file | Our copy of your OCR result | |
|---|---|---|
| Free trial | Deleted right after processing | Kept for 24 hours, then deleted |
These periods apply only to LongDoc OCR's own storage. They are not a guarantee about our provider's copies.
Model training
LongDoc OCR does not use your files or results to train our own models. How our third-party processor handles your data, including whether it is used for model training, is governed by its own terms, as described in Who processes your files. Baidu AI Cloud's terms do not say whether customer data is used for model training. They do allow Baidu to use customer data to maintain and improve its services.
Disclaimer
LongDoc OCR is an independent service and is not affiliated with or endorsed by Baidu.
5. Retention
- Moderation records: 180 days.
- Account data: while your account is open and 30 days after it is closed.
- Payment records: as long as tax and accounting law requires.
- Documents you convert (OCR) and their results: see Who processes your files and the retention table in section 4.
- Moderation records never contain your document or its text; for paid conversions they keep a fingerprint (SHA-256 hash) of the file. Job records without the text (page count, credits, conversion service, timestamps) are kept as part of your account history.
- Free-document records (hashed IP address, no document content): 35 days.
You can delete your account yourself under My account. This immediately deletes your stored OCR results, any uploads we still hold and your profile, and forfeits unused credits. Order and payment records, moderation records and content reports are kept for the periods above because the law or abuse prevention requires it. Signing in again later starts a new, empty account.
6. Analytics and cookies
We use essential cookies to keep you signed in. Analytics tools in use: a first-party, cookie-less count of visits referred by AI assistants (we store only the day, the assistant (for example ChatGPT), the landing page and a total; no cookies, IP address or other personal data).
7. International transfers
Our providers may process data outside your country. At this stage, every document you upload, including on the free trial, is transferred to and processed in mainland China by Baidu AI Cloud. Before you upload, we ask you to agree to this by ticking a box. If you do not agree, please do not upload your files. Where required, we rely on appropriate safeguards such as standard contractual clauses.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Contact support@unlimited-ocr2.com. You may also complain to your data protection authority. Marketing emails always include an unsubscribe link.
9. Security and breaches
We protect data with access controls and encryption in transit. If a breach is likely to put your rights at risk, we will notify the competent authority within 72 hours where required and inform affected users without undue delay.
10. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from children.
11. Changes
We will post changes to this policy on this page and update the effective date.