GDPR / KVKK Compliance

Last updated: 7/9/2026

This page summarizes how AI Document Scanner processes personal data in line with the EU General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law (KVKK), for organizations and individuals who need this for their own compliance review.

Data Retention

Uploaded documents, scans, and derived files (crops, filters, exports) are automatically and permanently deleted from our servers within 24 hours of upload, whether or not you created an account. Account data (email, subscription status) is retained only for as long as your account remains active.

Legal Basis for Processing

We process document images to perform the scanning service you explicitly request (contract performance / explicit request for service). Where you sign in, we process your email address to manage your account and subscription (contract performance). Aggregate, anonymized usage statistics are processed under legitimate interest to operate and improve the service.

Sub-processors

We share data with a limited number of processors strictly to deliver the service:

• Google Cloud Vision API - used only for the optional "Professional Scan" / text-extraction features, on a per-request basis.
• Polar.sh - used to process Pro subscription payments; we do not store your card details.
• Our hosting/infrastructure providers, used solely to serve the application and store files during the retention window above.

Your Rights

Under GDPR and KVKK, you have the right to:

• Access the personal data we hold about you.
• Request deletion of your account and associated data at any time.
• Correct inaccurate personal data (e.g. your email address).
• Request a copy of your data in a portable format.
• Object to or restrict certain processing of your data.

International Data Transfers

Some of our sub-processors (e.g. Google Cloud Vision) may process data outside your country of residence. Where this occurs, it is covered by that provider's own GDPR-compliant safeguards (such as Standard Contractual Clauses).

Contact / Data Requests

To exercise any of the rights above, or for any compliance question, please contact us using the details on our Privacy Policy page.