Privacy
What Blacktile keeps about you, why, for how long, and how to have it removed. Last updated November 6, 2026.
In short
- We use your Google account only to sign you in.
- We don't keep what you send to our APIs.
- Card and PromptPay details go to Stripe, never to us.
- No advertising, no analytics, no tracking. We don't sell your data or share it for marketing.
- This website sets no cookies of its own. The console uses one cookie, to keep you signed in.
What we keep
- Your account
When you continue with Google, Google tells us your name, email address, profile picture link, and account ID. We use them only to identify your account. We never see your Google password, and we don't keep Google's access, refresh, or ID tokens.
Kept: Until you delete your account.
- Sign-in sessions
A cookie named __Host-bt.session_token keeps you signed in to the console. Each session also records the IP address and browser it started from, to help us spot misuse.
Kept: A session ends when you sign out, or at most 7 days after you last use it. Its record is deleted within 2 days after that.
- What you do in the console
The workspaces, projects, and API keys you create, and a log of those actions with the time and IP address. For an API key we keep a hash and its last four characters, never the key itself.
Kept: IP addresses are removed from the log after 90 days. The rest stays with your workspace until you delete your account.
- Payments
When you add credit, we record the amount, the currency, the status and time of the payment, who started it, and Stripe's references for the payment and for your workspace as a Stripe customer. If you save a card for automatic top-up, we keep its brand, last four digits, expiry date, and Stripe's reference for it. Refunds and disputes are recorded the same way. We give Stripe your email address and your workspace's ID, so it can send your receipt and we can match the payment to your workspace.
Kept: Until you delete your account.
- API usage
For each API request: the time, the product, the API key used, the result, the units counted, and how long it took. Not what the request contained.
Kept: With your workspace, to show your usage, until you delete your account.
- What you send to an API
The images, documents, or text in a request, such as a page sent for OCR, and the results returned. They pass through our gateway to the service that processes them and come straight back to you.
Kept: Not stored. Logs never include them.
- Technical logs
Our hosting logs each request with its time, path, response, errors, and the connection details that come with it, so we can keep the service running. Requests to sign in are also counted per IP address for one minute, to stop abuse.
Kept: 3 days at Cloudflare and 30 days at Google Cloud.
Who processes it
Cloudflare runs this website, the console, and the API, and keeps the database in its Asia-Pacific region.
Google provides sign-in and runs the OCR service in Bangkok (Google Cloud, asia-southeast3).
Stripe processes payments. You enter card or PromptPay details on Stripe's own page, over an encrypted connection; they never reach our servers. Stripe stores a card you save for automatic top-up, charges it when your settings call for it, and emails your receipts. It keeps its own records of payments under its privacy policy.
We back up the database before each change to it. Backups are deleted after 30 days. We share nothing with anyone else unless the law requires it.
Your choices
To get a copy of your data, correct it, or delete your account and everything tied to it, email privacy@blacktile.dev from the address on your account. We reply within 30 days. A deleted account leaves the database at once and our backups within 30 days.
You can remove a saved card yourself at any time, in the console under Billing; it is removed at Stripe too. Stripe keeps a customer record for a workspace that has paid or saved a card, with your email address. Ask us and we delete it at Stripe as well. Stripe keeps its records of past payments under its own policy.
One thing stays after you delete your account, and only if you received the sign-up credit: a one-way hash (SHA-256) of your email address, so the same address cannot claim the credit twice. It does not contain your address; it can only tell us whether an address we are given is the same one. It is deleted when the sign-up offer ends.
When this page changes, the date at the top changes with it.