Optional Billing, Separate From Your Documents.
The first successful private-copy export of your own supported document is free with an email-verified account. The sample needs no account. If you choose an available subscription, Stripe will handle payment and billing details, such as your email address, billing address and payment method, under its own terms and privacy information.
The account service uses a functional, HTTP-only 30-day browser session cookie. It stores your verified email, account/terms timestamps, hashed sessions and verification challenges, provider customer/subscription identifiers, payment-access status and expiry. Extension activation stores a revocable 30-day token in extension-local storage; only its hash is stored on the server. It does not receive your PDF, filename, document text, detected identifiers or aliases. Billing identifiers are not document identifiers.
Subscription availability is shown on the billing page before you enter checkout. The document workspace itself continues to hold its document session in memory; billing storage is separate.
Account, Usage And Transactional Email Records.
Email codes expire after 10 minutes and five failed attempts. Browser and extension sessions expire after 30 days and can be revoked from My Account. Usage records identify account, random local document-session ID, allowance period, completion state and time. They contain no PDF content.
Transactional emails cover sign-in, welcome, subscription status and account deletion; contact messages are queued to the support inbox. The delivery outbox retries for less than 24 hours, scrubs successful payloads and removes expired payloads in daily maintenance. Codes are not logged by the application. Provider-side retention and international-transfer disclosures must be confirmed for the selected deployment.
Contact-form records are removed after 90 days by daily maintenance. Account deletion revokes sessions and removes email, usage and matching contact-form records. A keyed hash of the email remains for up to 365 days to prevent repeated free-document claims; restricted payment references may remain for billing reconciliation and legal obligations. Scheduled maintenance applies these retention limits.
1. Scope And Operator.
This policy covers the Witalias website, browser document workspace and Chrome extension. Witalias is an independent document privacy product at witalias.com. The operator and contact details are listed in the Legal notice. The website and document workspace are available online; the Chrome extension is distributed separately.
A document you later upload to ChatGPT, Claude, Gemini or another service is handled under that service’s terms and privacy policy. Witalias is independent of those providers.
2. Data Handled On Your Device.
When you select a PDF, the application accesses its bytes, filename, page content, text, coordinates and document structures to render it, suggest private details and create a protected copy. Documents may contain personal, financial, health, identification or other sensitive information.
Your selections, custom terms, manual regions, replacement mapping, rendered previews and output PDF are used only for the document workflow. No document content, filename or mapping is transmitted to Witalias or an external AI service by this application. We do not sell this data, use it for advertising, or train a model on it.
The application does not persist document sessions in cookies, localStorage, IndexedDB or Chrome storage. The extension has no access to your chat history, unrelated web pages, account credentials or browsing history.
3. Website And Extension Network Activity.
The website must request its HTML, scripts, fonts, PDF engine and public synthetic sample from its host. Like any website, the host receives technical request information such as IP address, request path, user agent and request time. The current application contains no analytics or advertising integration.
The installed extension includes those assets and the sample locally. Your own document workflow checks account access and reserves/completes an allowance unit online. Only random local document-session IDs and usage states are sent, never document contents, filenames or aliases. Chrome’s installation and update services are operated by Google and are governed by Google’s policies.
Hosting provider, location, operational logging and retention are deployment-specific. The website uses Netlify hosting. Account records use Neon PostgreSQL; transactional delivery uses AhaSend and payments use Stripe. A no-document-upload architecture does not mean a hosting provider receives no website request data.
4. Retention And Clearing.
Document state remains in the active session until you clear it, open another document or close the workspace. Clear session terminates the processing worker and revokes the application’s preview URLs. Exported files and the original file remain on your device.
Browser caches, operating-system memory management, swap, backups and your own downloads are outside the application’s control. The application does not promise forensic secure erasure. Hosting and support retention, when applicable, must be disclosed for the actual deployment.
5. Support And Voluntary Communications.
If you contact support, your email address and the information you choose to send are handled to respond to your request. Do not send confidential PDFs, identity documents, access tokens or sensitive screenshots. Start with a synthetic reproduction.
The contact form accepts a name, email, topic and message without attachments. Submissions are stored for up to 90 days and queued to the support inbox. AhaSend handles transactional email delivery. Contact submissions are routed to the support inbox. Support communications are separate from local PDF processing.
6. Your Choices And Privacy Requests.
You control which file to open, which changes to make, whether to download an output and where to share it. Clear session removes active application state; delete downloaded copies through your device’s normal controls.
If the operator holds information from a support conversation or website logs, use the privacy contact on the Legal notice to request access, correction or deletion and exercise any other rights available under applicable law. Where the GDPR applies, rights may include access, correction, deletion, restriction, portability, objection and withdrawal of consent when processing relies on consent. These rights have conditions and exceptions. You may lodge a complaint with a competent data-protection authority; the relevant authority depends on the confirmed legal operator and your circumstances.
The Witalias document pipeline does not create a server-side copy that support can retrieve. It cannot erase chats or files already held by an AI provider.
7. Changes To This Policy.
The policy date appears above. Material changes to processing, permissions or persistence require an updated policy and product disclosures before release. A future cloud feature would need a separate data-handling assessment and clear notice.