Privacy Policy

This policy explains what Termflow does with the documents and data you provide. It describes current MVP behaviour and does not promise legal guarantees the service does not actually provide.

What you upload

You upload a study document (PDF, DOCX, JPG or PNG) plus context such as your timezone, term dates and optional course name.

Why it is processed

The document is processed solely to extract calendar events for you to review and export. In production, the document (or its pages) may be sent to a third-party AI provider to perform that extraction.

AI-assisted extraction

When AI-assisted extraction is enabled, uploaded document content (or, for images and scanned PDFs, the file itself) may be sent to Google Gemini to identify calendar events. Documents are processed temporarily for this purpose only. Termflow does not intentionally keep a permanent copy of the original file. Handling on Google's side follows Google's own API terms — always review every extracted date before exporting it.

How long documents are kept

Original documents are not stored permanently. They are held only temporarily during processing and deleted afterwards, with a cleanup job removing any forgotten files after the configured retention window.

What is kept after the document is deleted

• The filename, MIME type and technical metadata.
• The extracted events and their status.
• Short source excerpts used to explain each event.

The full extracted text of your document is not retained after successful processing.

Abuse prevention

For anonymous usage limits and rate limiting we store only a hashed session identifier, hashed email or hashed IP — never the raw value. Hashing uses a server-side secret key, so a leaked hash cannot be reversed back to your email or IP.

Cookies, bot protection and analytics

• Essential cookies: sign-in session and, for anonymous use, a session identifier so your one free conversion can be tracked without an account. These are required for the service to work and are not optional.
• Bot protection: when enabled, anonymous uploads and sign-in requests are verified by Cloudflare Turnstile, which may process your IP address and browser signals to confirm you are not a bot. No document content is ever sent to Turnstile.
• Analytics: when enabled, we use privacy-respecting analytics (PostHog) to understand feature usage — page views and a small set of named product events. Analytics never receives your document content, filename, email or IP, and only runs after you accept it in the cookie banner.

Deleting your account

Once accounts are available, you can request account deletion, which removes your profile and associated conversions.