Privacy

• Your uploaded files, the data we extract from them and the spreadsheets we generate are deleted from our systems 24 hours after a job finishes.
• We never use your documents to train AI models, and we don't sell your data or use it for advertising.
• The pages you process are read by an AI provider (Anthropic), which keeps API data on its own systems for up to 30 days. That is separate from our 24-hour deletion and is explained below.

Mohamed Abdul Hameed (“we”) runs ClarifyMuch (the “service”). This page explains what personal data the service handles and why. You can reach us at [email protected].

• Your email address, to sign you in with a one-time link (there are no passwords) and to contact you about your account.
• Your documents and what we make from them: the files you upload, the data extracted from them, and the XLSX and CSV files we generate. These can contain personal and financial information about you or other people. For bank statements we keep only the last four digits of an account number in the extracted data.
• Job records: the document type, page count, status, timestamps, the file name you gave it (removed when the file is deleted) and how many credits it used.
• Credit and payment records: your credit history and, once purchasing opens, the amount, currency, status and reference of each payment. We never receive card details or wallet keys.
• Technical data: how much AI processing each job used (token counts, so we can price the service), ordinary server logs, and information used to limit abuse such as upload and preview rates.
• Cookies: one session cookie that keeps you signed in. We don't use advertising or analytics cookies.

To provide the service (read your documents, check the numbers, produce and deliver your files), to keep credit balances and payments accurate, to protect the service against abuse and fraud, to give you support, and to meet legal obligations. We don't use your documents for anything else.

• Files, extracted data and generated spreadsheets: deleted 24 hours after a job finishes or fails. If you upload a document and never process it, it is deleted 24 hours after upload; an upload that never completes is removed within a couple of hours.
• Job records (type, page count, status, dates, credits used) are kept so you can see your history and we can account for credits, until you ask us to delete your account.
• Credit, payment and admin-adjustment records are kept for as long as we need them for accounting and legal purposes.
• Backups made by our infrastructure provider may hold deleted records for a limited time after they leave our live systems.

• Supabase — our database, sign-in and file storage, hosted on Amazon Web Services in India (Mumbai region).
• Anthropic — its Claude API reads each page you process. Under Anthropic's commercial terms, data sent to the API is not used to train its models by default and is deleted from its systems within 30 days, except where longer retention is needed to enforce its usage policy. We don't control that retention, so the 24-hour deletion above applies to our own systems, not Anthropic's.
• Inngest — runs our background processing. It receives job and account identifiers, file locations and processing status, not the contents of your documents.
• Vercel — hosts the web application and sees ordinary request data such as IP addresses.
• When purchasing and email notifications launch we will add a crypto payment processor and an email delivery provider to this list. Sign-in emails are currently sent through Supabase.

Some of these providers process data in the United States and other countries, so your data may be transferred outside the country where you live.

• Your files are stored privately and are only ever reachable through short-lived links.
• Each account can only see its own documents, results and credit history.
• The admin tools we use for support show job metadata (status, page counts, dates), not your documents or extracted data.
• Sign-in uses one-time email links rather than passwords.

No system is perfectly secure, and we can't guarantee that nothing will ever go wrong.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how it is used. There is no self-service account deletion yet: email us at [email protected] and we will delete your account and its records, other than information we are required to keep.

The service is for business use and isn't intended for anyone under 18.

If we change how we handle data we will update this page and its date, and tell you about significant changes.