Privacy Policy

AnyRedact is operated by Arixeva Labs (www.arixevalabs.com). This policy explains what the service does and does not do with your documents, your account, payments, and cookies.

Documents you upload

Your files are never uploaded. AnyRedact opens, redacts, and exports PDFs and images entirely in your browser, so the document and every redaction you draw stay on your device throughout. A local timer clears that in-browser session automatically after 24 hours, or immediately when you choose Start over or close the tab.

Because your file is never uploaded, we have no copy of it to use for advertising, training, or analytics — there is nothing on our side to use.

Signing in

To sign in, we send a one-time 6-digit code to the email address you enter. The code is discarded once it's used or after 10 minutes, whichever comes first — it is never stored longer than that.

Once you sign in, your email becomes your account: it's kept, along with your credit balance and usage and purchase history, for as long as your account is in use. It is not deleted automatically the way a one-off verification code is — see "What we store, and why" for the full list and how to ask us to delete it.

What we store, and why

The only personal data AnyRedact's server ever holds is:

• Your email address — your account identifier, kept while your account is in use.
• A one-time 6-digit code — hashed, valid for 10 minutes, deleted once used or expired.
• Credit balance — remaining purchased credits for your account.
• Usage and purchase history — how many credits a redaction used, and credit packs you bought, so you can review them on the account page.
• A cookie-consent preference — stored in your browser's local storage, not on our server. See Cookies below.

None of this includes document content, filenames, or redaction details — those never reach our server in the first place.

Service providers

Sending transactional mail and storing account state requires two outside providers acting on our behalf: Resend delivers the sign-in code and the purchase-confirmation email, and Turso hosts the database holding your email, credit balance, and history. Neither provider ever receives your document — only your email and account state pass through them.

Dodo Payments processes credit-pack purchases as our merchant of record. We never see or store your full card details — Dodo handles payment collection and sends a signed webhook with your email and the product purchased so we can add credits.

We also use Vercel Analytics and Google Analytics to see which pages get used, in the aggregate — never the contents of a document. See Cookies below for how each one is triggered.

Cookies

On your first visit we ask for cookie consent. We store only a strictly necessary preference in local storage so we can remember whether you accepted or rejected cookies.

Vercel Analytics runs regardless of that choice — it counts page views without cookies or any identifier tied to you. Google Analytics only starts, and only sets its cookies, after you accept; if you reject or never respond, it never loads. Rejecting or accepting can be changed at any time by clearing your browser's local storage for this site and reloading the page.

Children's privacy

AnyRedact is not directed to children and we do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.

Your choices and rights

You can ask what data we hold for your account, ask us to delete your account and everything listed above, or ask us any question about this policy by emailing arixevalabs@gmail.com. Unused credits can be refunded as described in the Terms.

Changes to this policy

If this policy changes, we will update this page and the date at the top. Continued use of AnyRedact after a change means you accept the updated policy.

Contact

Questions about this policy can be sent to arixevalabs@gmail.com.