Skip to content

Privacy Policy

Last updated: April 2026

Data Controller

Chut, Belgium — contact@chut.app

Data We Collect

  • Account data: Email address, hashed password (argon2id).
  • API usage: Request count, file size, processing time, status code. Logged per API key for billing and monitoring.
  • Documents: Processed in-memory only. Zero retention — files are immediately deleted after OCR extraction. Never stored, logged, or transmitted.

Cookies

  • optii_access — session token (1 hour, httpOnly, secure)
  • optii_refresh — refresh token (30 days, httpOnly, secure)

No tracking cookies. No analytics. No third-party cookies.

Data Transfers

All data is processed and stored in European data centers (France and Germany). No data is transferred to or processed in the United States or any non-EU country.

Retention

  • Account data: until you delete your account
  • Usage logs: 90 days
  • Documents: 0 days (processed in-memory, never stored)

Your Rights (GDPR)

You have the right to access, rectify, delete, port, and object to processing of your data. Contact contact@chut.app to exercise these rights.

Sub-processors

None. All infrastructure is self-managed on Scaleway (France) and Hetzner (Germany).