Privacy policy

Unpeat is operated from Australia by Lucas Knight. This policy says what the service stores, why it stores it, and who else can see it.

What we collect

• Account details. Your email address, and your name and profile image if you sign in with Google or Apple. Passwords are stored only as a hash.
• Documents. The PDF forms you upload, the page images rendered from them, the fields detected on each page, and the values you enter.
• Usage records. The cost and token counts of the AI calls your account makes, so spending can be shown to you and to us.
• Payment records. Stripe and Apple hold your payment details. We store only the subscription state and the customer identifier.

We do not use advertising, and we run no third party analytics or tracking scripts.

How we use it

To run the service: to detect the fields on your forms, to fill them from the details you supply, to render the completed PDF, and to bill a subscription. We do not sell your data, and we do not use your documents to train models.

Who processes it

• Convex, the application backend and database.
• Vercel, web hosting.
• The Vercel AI Gateway and the model providers behind it, for field detection and filling. Page images and form text are sent to them. Providers reached through the gateway do not train on the content.
• Stripe, for web subscriptions. Apple, for subscriptions bought in the iPhone app.
• Resend, for transactional email such as password reset codes.

Local mode on the Mac

The Mac app has a local mode for sensitive records. In that mode the real values live in an encrypted vault on your machine, and the copy that reaches our servers and any AI model is a synthetic twin: the same structure with mock values. An always on network allowlist blocks every destination the app does not need.

Keeping and deleting data

Documents stay until you delete them or ask for the account to be deleted. Email hello@unpeat.com from your account address to have the account and everything in it removed within 30 days.

Your rights

Under the Australian Privacy Principles you may ask for a copy of your data, ask for a correction, or complain about how it is handled. Write to hello@unpeat.com. If you are not satisfied you may contact the Office of the Australian Information Commissioner.

Children

Unpeat is not directed at children and we do not knowingly collect their data.

Changes

If this policy changes we update the date at the top of this page, and we tell account holders by email when the change is significant.