Legal

Privacy Policy

This policy explains what Mahad OCR collects, why, and what control you have. It covers the website, the dashboard, the API and any future Mahad OCR mobile application.

What we collect

Account data (name, organisation, email, optional mobile number and country). Document data (files you upload and the text and fields extracted from them). Usage data (requests, quota counters, API key identifiers, IP address and timestamps for security).

Why we process it

To provide OCR extraction, to run your account and billing, to enforce quotas and prevent abuse, and to secure the service. We do not sell personal data, do not use your documents for advertising, and do not use your documents to train models unless you have agreed to it in writing.

AI processing by third parties

Passports, IDs, visas and scanned documents are read by two independent AI providers — Google (Gemini) and OpenAI — so that each important value is checked twice; text CVs (PDF with text, Word) are structured by DeepSeek, and CV wording improvements are written by DeepSeek and checked by Google Gemini. Documents handled by the on-server engines (MRZ and Tesseract) are not sent to any external provider. Every result names the readers that were used.

Public demo

The public demo processes your file in memory and returns a masked preview. The demo does not store the uploaded file. Do not upload real personal documents to the public demo — use synthetic samples.

Retention

Mahad OCR reads documents and returns data; it is not a document archive. Fixed retention periods: original files 30 days after reading; extracted results 90 days; failed reads 7 days; items waiting for review until reviewed plus 30 days; documents of test accounts 24 hours. Documents are used as training data only with your written opt-in. You can delete a document earlier at any time. See the Data Retention and Deletion Policy for the detail.

Isolation

Your data is scoped to your tenant. Other customers cannot read it. Internal platform access is restricted to named Mahad staff accounts and is audit-logged.

Your choices

You can export or delete your data, correct extracted fields, and close your account. Requests: [email protected] (subject "Privacy request").

Mobile applications

A future Mahad OCR mobile app would request camera access only to capture a document you choose to scan. Camera frames would be used for that capture only. No app is published yet.

Contact

Privacy questions: [email protected] (subject "Privacy request").

Operated by Mahad Information Technology. Last updated 2026-10-01.