Privacy policy

01Who

Chut.App BV, Wevelgem, Belgium, is the data controller for optii.eu and api.optii.eu. Contact: contact@chut.app.

02What we process

Account: your e-mail address, the plan, the creation date. Sign-in codes are handled by auth.chut.me and never stored by optii.

API keys: stored as SHA-256 hashes with a prefix for display. The secret is shown once.

Usage: for every API call, timestamp, key, endpoint, duration, file size, status code and, from the next release, page count, source, confidence, quality warnings, document type and request id. Never the text, never the fields, never the file.

Documents: processed in memory for the duration of the request, then discarded. They are not written to disk, not logged, not used for training.

Idempotent replays: when you send an Idempotency-Key, the JSON response is kept for 24 hours under a hash of the file, so a retry returns the same answer. That stored response contains the extracted text; it is deleted after 24 hours. Do not send an Idempotency-Key if you do not want that.

03Cookies

optii_access (1 hour) and optii_refresh (30 days): the session, HttpOnly and Secure. lang (1 year): your language. No analytics, no tracking, no third-party cookies.

04Where

GPU inference runs on a dedicated server at Hetzner in Germany. The usage database is Scaleway Managed PostgreSQL in Paris. The website runs on Scaleway in Paris. Nothing is transferred outside the European Union.

05How long

Account data: until you delete the account. Usage rows: for the life of the account; they lose their link to you when the account is deleted. Documents: zero seconds after the response. Idempotent replays: 24 hours.

06Your rights

Access, rectification, erasure, portability, objection: write to contact@chut.app or delete the account from the dashboard. You can complain to the Belgian Data Protection Authority (APD/GBA).

07Sub-processors

Hetzner Online GmbH (Germany, servers), Scaleway SAS (France, database and hosting). No other party sees your data.