Legal

Privacy Policy

Last updated: [Date] · Operated by [Legal Entity Name] ("SmartScan AI", "we", "us")

SmartScan AI is an AI-native document intelligence platform. Because we work with the real documents that run your life — bills, contracts, IDs, insurance, and more — your privacy is not a setting here. It is the foundation of the product. This policy explains exactly what we collect, how we use it, who processes it, and the control you keep.

1. Who we are

SmartScan AI is operated by [Legal Entity Name], registered at [Registered Address, City, Region, Postal Code, Country]. For any privacy question, contact [email protected].

2. Information we collect

CategoryWhat it includes
Documents you provideFiles and images you scan, upload, forward, or send to us (including via WhatsApp) — and their full content.
Derived document dataInformation our AI extracts and infers from your documents: document type, names, dates, amounts, terms, obligations, deadlines, and the relationships between documents.
Messaging dataIf you use the WhatsApp assistant: your WhatsApp phone number and the messages you send to and receive from the assistant.
Account & contact dataEmail address, name (if provided), waitlist details, and preferences.
Usage & device dataBasic technical and interaction data needed to operate and secure the service.
Sensitive documents. Documents such as passports, national IDs, and insurance cards may contain sensitive personal data. We treat them with heightened protection and only process them to deliver the features you ask for.

3. How we use your information

We do not sell your data, and we do not use your document content to train third-party AI models. Your documents are processed to serve you.

4. AI processing and subprocessors

Delivering document understanding requires trusted infrastructure. We use vetted third-party processors strictly to operate the service, under contractual confidentiality and data-protection obligations:

About WhatsApp. Messages to the assistant are delivered through Meta's WhatsApp Business Platform and are processed on Meta's infrastructure to reach us. For this reason, sensitive documents are never delivered as raw files over WhatsApp — instead you receive a secure, single-use, expiring link that opens the document under your own device's protection.

5. Legal bases for processing

Where applicable law requires a legal basis (e.g. GDPR, or the Saudi/UAE Personal Data Protection Laws), we rely on: your consent; the performance of our service to you; our legitimate interests in operating and securing the platform; and compliance with legal obligations.

6. Data sharing

We share data only with the subprocessors above, and only as needed to run the service; where required by law or to protect rights and safety; and in connection with a corporate transaction, under equivalent protections. We never sell your personal data or document content.

7. Security

We protect your data with encryption in transit and at rest, access controls, the secure-link mechanism for sensitive documents, and ongoing security practices. No system is perfectly secure, but security decisions here are made in your favor.

8. Data retention

We retain your documents and derived data for as long as your account is active or as needed to provide the service. You can delete documents or your entire account at any time, after which we delete or irreversibly anonymize the associated data, except where retention is legally required.

9. Your rights

Subject to your local law, you may access, correct, export, restrict, or delete your personal data, withdraw consent, and object to certain processing. To exercise any right, email [email protected]. You also have the right to complain to your local data-protection authority.

10. International transfers

Your data may be processed in countries other than your own (including by the subprocessors above). Where it is, we use appropriate safeguards consistent with applicable data-protection law.

11. Children

SmartScan AI is not directed to children under [16/18]. We do not knowingly collect their personal data. Documents concerning a minor (for example a child's passport) should only be submitted by a parent or guardian.

12. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated through the service or by email, with the "last updated" date revised above.

13. Contact

Privacy enquiries: [email protected] · General: [email protected] · [Legal Entity Name], [Registered Address].