Privacy Policy

ParseAI is a product of Squrtech ("Squrtech", "we", "us", or "our"), a proprietary firm owned and operated in India. ParseAI is Squrtech's document intelligence platform available at parseai.org and platform.parseai.org (collectively, the "Service").

This Privacy Policy describes how Squrtech collects, uses, stores, and protects personal information and data when you use ParseAI. By using the Service, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.

This policy is governed by the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (to the extent applicable and in force).

Account information: When you sign in via Google OAuth, we collect your name, email address, profile picture URL, and a stable identity identifier from your provider. We do not receive or store your Google password.

Organisation information: The organisation name and unique slug you provide during account setup. If you are the owner of a verified organisation domain, we store that domain claim.

Documents you upload: Files (PDF, JPEG, PNG) submitted for processing. Documents are stored temporarily and automatically and permanently deleted 30 days after upload. We do not read, analyse, or use the contents of your documents for any purpose beyond processing them as instructed by you. We do not use your documents to train AI models or build datasets.

Processing output: Parsed text and extracted JSON generated from your documents. Stored in S3-compatible object storage for up to 30 days and then permanently deleted.

Folder schemas: The extraction schemas (field definitions and instructions) you configure in the platform. These are retained as long as your account is active and are not subject to the 30-day deletion rule.

Usage data: Number of documents processed, pages consumed, API request counts, timestamps, processing status events, and error logs. Used for billing, operational monitoring, and product improvement.

Billing information: Payment transactions, top-up history, page balance, GST records, and tax invoices. Card and bank account details are handled entirely by Razorpay and are never stored on our servers.

API keys: We store only a one-way SHA-256 hash of API keys you generate. The plaintext key is displayed once at creation and cannot be recovered from our systems. We also store the key prefix for display purposes.

Team member data: Email addresses of users you invite to your organisation, along with their assigned role and invite acceptance status. Invite tokens expire and are deleted after 7 days.

Contact form submissions: Name, email address, and message submitted through the contact form at parseai.org. This is transmitted by email to Squrtech and is not stored in our database.

Technical data: IP addresses, browser type, device information, and access logs collected automatically for security and operational purposes.

• To provide, operate, and maintain the ParseAI service
• To process documents you upload and return structured output to you
• To manage your account, organisation, team members, billing, and API access
• To send transactional emails, account invitations, payment confirmations, and tax invoices
• To respond to support requests and contact form enquiries
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations under Indian law, including tax and accounting requirements
• To improve the Service based on aggregated, anonymised usage patterns, never using identifiable document content

We do not use your uploaded documents or extracted output to train AI models, build datasets, or for any purpose beyond delivering the Service to you.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

All uploaded documents, parsed text, and extracted JSON output are automatically and permanently deleted from our systems 30 days after upload. This applies regardless of whether processing completed successfully, failed, or is still in progress.

This deletion is a hard, irreversible system-level operation. Once deleted, data cannot be recovered under any circumstances. It is your sole responsibility to retrieve and save your extracted output before the 30-day window closes.

The 30-day window begins at the time of upload, not at the time processing completes. If you need the data after expiry, you must re-upload the document and process it again, which consumes additional pages from your balance.

Billing records, usage statistics, transaction history, tax invoices, and account information are retained for a minimum of 7 years as required under Indian accounting and tax laws.

We use the following third-party services to operate ParseAI. Where your data is shared with these services, their respective privacy policies govern how they handle it:

• Sarvam AI (Axonwise Private Limited), document parsing and field extraction. Your uploaded documents are transmitted to Sarvam AI's API for processing. Sarvam AI's privacy policy governs their handling of this data.
• Razorpay Financial Solutions Private Limited, payment processing. Card and bank details are handled exclusively by Razorpay and are never stored on Squrtech's servers. Razorpay is PCI-DSS compliant.
• Google OAuth, identity verification during sign-in. We receive only basic profile information (name, email, profile picture, stable user ID) from Google. We do not receive your Google password.
• S3-compatible object storage, temporary storage of uploaded documents and processing output (deleted after 30 days) and long-term storage of tax invoice PDFs in a separate, dedicated bucket.
• SMTP email delivery, used to send transactional emails (invitations, invoices, contact form acknowledgements).
• Google Analytics 4 and Microsoft Clarity, analytics and session recording on our marketing website (parseai.org) only. These tools collect anonymised usage data such as page visits, clicks, and session recordings to help us improve the website. They are not active on the platform (platform.parseai.org) and do not have access to your documents or extracted data.

Documents submitted to ParseAI may contain Aadhaar numbers (e.g. KYC forms, identity documents). Squrtech is not a UIDAI-licensed Requesting Entity. To protect individuals whose Aadhaar data may appear in uploaded documents, ParseAI applies automatic redaction as follows:

• Aadhaar numbers are detected using the Verhoeff checksum algorithm, the same validation method used by UIDAI, combined with UIDAI's first-digit rule (valid Aadhaar numbers begin with digits 2-9).
• All detected Aadhaar numbers are masked immediately after document parsing, before any output is written to storage. Only the last 4 digits are preserved (e.g. XXXX XXXX 1234). The full number is never stored.
• Masking is applied to all output artifacts: parsed text (markdown), raw JSON, extracted JSON, and page-level bounding box metadata.
• In the platform's document viewer, image regions containing a detected Aadhaar number are covered with a visual block to prevent display of the number.

This redaction is automatic and cannot be disabled. It applies to all documents processed through ParseAI regardless of document type or extraction schema. Users remain responsible for complying with the Aadhaar Act, 2016 and applicable UIDAI regulations in their own use of the Service.

Squrtech implements industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS 1.2 or higher
• Documents and processing output are stored with server-side encryption at rest
• API keys are hashed using SHA-256 one-way encryption and never stored in plaintext
• Access to production systems is restricted to authorised personnel only
• Automatic and permanent deletion of all document data after 30 days
• Aadhaar numbers automatically detected and masked before storage using Verhoeff checksum validation
• Organisation data is fully isolated, no user or API key from one organisation can access another organisation's data

No method of transmission over the Internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

ParseAI is a multi-tenant platform. Each organisation's data is logically isolated and stored under a unique organisation identifier. All database queries are scoped to the requesting organisation, and all file storage paths are namespaced by organisation ID. No user or API key from one organisation can access data belonging to another.

Under applicable Indian law, including the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Request deletion of your account and associated personal data by contacting us at sales@squrtech.com (billing and transaction records required for tax compliance will be retained as mandated by law)
• Nominate another individual to exercise your rights on your behalf
• Withdraw consent for data processing, note that this will require account closure as the Service cannot be provided without processing your account data
• Lodge a complaint with our Grievance Officer
• File a complaint with the Data Protection Board of India once it becomes operational under the DPDPA 2023

To exercise any of these rights, contact our Grievance Officer. We will respond within 30 days.

Platform (platform.parseai.org): We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies on the platform. Disabling essential cookies will prevent you from logging in.

Marketing website (parseai.org): We use Google Analytics 4 and Microsoft Clarity to understand how visitors interact with our marketing website. These tools may set cookies and collect anonymised data including page views, session duration, and click patterns. Microsoft Clarity also enables session recording on the marketing site. No document content or platform data is ever shared with these tools.

ParseAI is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account or provided us personal data, please contact us immediately and we will delete it promptly.

Squrtech operates in India and processes data primarily within India. Where third-party service providers process data outside India, we ensure appropriate safeguards are in place consistent with applicable Indian law and the Digital Personal Data Protection Act, 2023.

In accordance with the Information Technology Act, 2000, the IT Rules, 2011, and the Digital Personal Data Protection Act, 2023, the following contact is designated as the Grievance Officer for ParseAI:

For general privacy questions, data requests, or concerns, contact us at:

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes that affect your rights or how we handle your data, we will notify registered users by email at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.