PRIVACY BY DESIGN

Privacy and local invoice processing

DocuExtract is designed to process invoice files locally in the browser without an application backend, account, database, analytics or telemetry. This page separates the application's file-processing design from the behavior of website hosting and your own device.

Does the application upload invoice files?

Application code does not upload selected invoice PDFs to a backend. Processing takes place locally in the browser. You can independently inspect the browser's network tab while using the app to verify observed network activity.

This is a statement about the application's documented design. It is not a guarantee that your computer, browser, browser extensions, operating system or network environment cannot access local information.

What invoice information is stored by the application?

Invoice data is never written to URLs, localStorage or sessionStorage. PDF buffers are released and documents are destroyed after processing. React rendering does not use dangerouslySetInnerHTML.

DocuExtract does not provide an application account, database, analytics or telemetry. The documented design does not include an application server that receives invoice content.

Does this website use cookies or analytics?

This static marketing website is designed without cookies, analytics, trackers, embedded third-party content, web fonts or third-party runtime requests. The stylesheet and favicon are intended to be served from the same site. The pages do not require JavaScript for their content or navigation.

The hosting provider may keep standard server logs. Hosting infrastructure is separate from the browser-side invoice processing design, and this page does not claim that the hosting provider never records a request.

What security measures are documented?

Invoice files are processed locally by application code, invoice data is not written to URLs or browser storage, PDF buffers are released, and documents are destroyed after processing. Export handling applies formula-injection sanitization, extracted data is validated with Zod, and React rendering does not use dangerouslySetInnerHTML.

These measures reduce particular risks but do not guarantee that all extraction results are correct or that every possible security risk has been eliminated. Review exported data and use a trusted, up-to-date browser on a device you control.

Where is the application privacy documentation?

The source repository is the reference for application implementation. Read the repository's PRIVACY.md file for its published privacy documentation, or inspect the source code directly.

What should I do before processing an invoice?

Use documents you are authorized to process. Avoid using a shared or untrusted device for sensitive business records. Review the extracted fields and line items against the original invoice before accounting, tax, payment or legal use.

Local processing means the application's file workflow is designed to stay in the browser; it does not remove your responsibility to protect access to the original PDF and exported files on your device.