Privacy Policy

Who we are

ThinkEx Inc. ("ThinkEx," "we," "us," and "our") operates FileRouter and is responsible for personal information processed through the FileRouter website and hosted service. You can contact us at hello@thinkex.app.

Information we collect

• Account information, such as your name, email address, profile image, email-verification status, and Google sign-in identifiers when you choose Google authentication.
• Session and security information, such as session identifiers, IP address, user agent, authentication events, device-authorization codes, and related timestamps.
• API-key information, such as key name, prefix, permissions, creation and expiration dates, request counts, rate-limit state, and last-use time.
• Document-job information, such as filenames, source URLs, selected providers, requested outputs, page selections, provider options, job status, errors, page count, timestamps, and request or idempotency hashes.
• Document contents and results when you use FileRouter-hosted processing, including uploaded source files and provider responses you ask FileRouter to return or retain.
• Operational information, such as request identifiers, service errors, infrastructure logs, and diagnostic data needed to secure and operate the service.
• Communications and scheduling information you provide when you contact us, join the community, request support, or book a meeting through Cal.com.

How we use information

• To authenticate users, issue and manage API keys, and maintain account and CLI sessions.
• To accept documents, create jobs, call selected providers, normalize results, and return or compare outputs.
• To prevent duplicate submissions, enforce limits, detect abuse, investigate errors, and protect FileRouter and its users.
• To maintain, debug, support, and improve the website, SDK, CLI, API, and hosted infrastructure.
• To communicate about support, security, service changes, and meetings you request.
• To comply with law, enforce our terms, and establish or defend legal claims.

How document processing works

Hosted requests pass through FileRouter infrastructure. We send the document and applicable options to the provider or providers selected for the job. Comparison requests send the document to every selected provider. Direct or BYOK SDK and CLI requests call the provider from your environment and do not send that request through FileRouter's hosted service, although the selected provider still receives and processes the document.

Service providers and recipients

We use Cloudflare for application hosting, networking, logs, databases, durable workflows, and object storage; Google for optional sign-in; Cal.com for meeting scheduling; and supported document-processing services such as LlamaParse, Mistral AI, and Datalab when selected for a hosted job. We may add or replace providers as FileRouter evolves. Providers process information under their own terms and privacy notices, and their retention may differ from FileRouter's.

Retention

• Uploaded source documents used for hosted jobs are scheduled for deletion after processing completes or fails. Cleanup may be retried if an immediate deletion attempt does not succeed.
• Completed hosted results are scheduled to expire seven days after completion.
• Hosted document-job records are scheduled for deletion 30 days after creation.
• Account, authentication, API-key, security, and support records are kept while needed to provide and secure the service, comply with law, resolve disputes, and enforce agreements.
• Third-party providers apply their own retention practices to information sent to them.

Legal bases and international processing

Where data-protection law requires a legal basis, we process information as needed to provide the service and perform our contract with you, for legitimate interests such as security and service improvement, with consent where requested, and to comply with legal obligations. ThinkEx and its providers may process information in the United States and other countries, which may have different data-protection laws from your location.

Cookies and browser storage

FileRouter uses cookies and browser storage for authentication, session security, and preferences such as theme. The Cal.com scheduling experience may use its own cookies or similar technology. See the FileRouter Cookie Policy for more information.

Your choices and rights

• You can revoke API keys from the dashboard and can stop using hosted processing by using direct or BYOK mode where supported.
• You can control cookies and browser storage through your browser, although blocking required cookies may prevent sign-in or dashboard access.
• Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Contact us to make a request.
• We may need to verify your identity before completing a request and may retain information where law permits or requires.

Security

We use technical and organizational safeguards designed to protect information, including authenticated job access, scoped API-key permissions, hashed replay identifiers, signed short-lived source URLs, provider-option validation, and retention cleanup. No internet service can guarantee complete security.

Children

FileRouter is not directed to children under 13. If you believe a child has provided personal information through FileRouter, contact us so we can take appropriate action.

Changes

We may update this policy as FileRouter, its providers, or legal requirements change. We will post the current version here and update the date above. We will provide additional notice when reasonably required.

Contact

For privacy questions or requests, email hello@thinkex.app.