Privacy policy
Last updated: 3 October 2026
This policy explains what personal data Aoken Extract and the Aoken Labs website collect, why, how long it is kept, and your rights. Aoken Labs is the trading name of Bander Alshammari, an individual based in the Kingdom of Saudi Arabia ("we", "us"). We are the controller of the data described here. Contact: support@aokenlabs.com.
The short version
- Documents you upload, and the tables we extract from them, are deleted automatically within 24 hours.
- We never use your documents to train AI models, and we do not let our providers do so.
- We never sell your data, and we do not use advertising trackers.
- Payments are handled by Paddle. We never see your card details.
What we collect and why
| Data | Why | Kept for |
|---|---|---|
| Your email address | To sign you in, keep your credit balance, and answer support requests | While you have an account, then as long as tax and accounting rules require for your purchases |
| Documents you upload and the results | To convert them into tables for you (the service you asked for) | Deleted automatically within 24 hours, or sooner if you delete them |
| Usage records: date, page count, credits used, file type and size, success or failure | To charge the right number of credits, refund failed conversions, and prevent abuse | While you have an account, then as long as accounting rules require |
| Purchase records from Paddle: order ID, pack, amount, country | To add credits to your account and handle refunds | As long as tax and accounting rules require |
| Technical logs: IP address, browser type, request times, errors (never document content) | Security, abuse prevention and fixing faults | Up to 30 days |
| Support emails | To answer you | Up to 2 years after the conversation ends |
Our legal bases are: performing our contract with you (the conversions you buy), our legitimate interest in security and preventing abuse, and legal obligations (tax and accounting records).
How your documents are processed
Pages you upload are read by an AI model to find tables and text. The model provider processes the content only to return the result to us, under commercial terms that do not allow it to use the content to train its models. It may keep the content for a limited period for security and abuse monitoring, as its terms allow. Automated checks then validate the result (for example, that totals add up). We do not read your documents, except where you ask us to look into a problem with a specific conversion, and only with your permission.
Please do not upload documents you are not entitled to share, or that contain data you must not send abroad.
Who else handles your data
| Provider | Role | Data | Location |
|---|---|---|---|
| Paddle.com Market Limited (Paddle) | Merchant of record: sells you credits, takes payment, handles tax, invoices and refunds | Name, email, billing address, payment details, purchase history | United Kingdom, with its own processors |
| Anthropic, PBC | AI model that reads your document pages to extract tables | The content of the pages you upload, only while they are processed | United States |
| Cloudflare, Inc. | Website hosting and security; receives email sent to our support address and forwards it | IP address and request logs; support emails in transit | Global network, United States company |
| Google LLC (Gmail) | Support mailbox where we read and answer your emails | Your email address and the messages you send us | United States |
Paddle is the merchant of record for all purchases: it sells you credits, so for payment data it is a separate controller under its own privacy notice. Some of these providers are outside your country, including in the United States. Where the law requires, we rely on appropriate safeguards for these transfers.
We share data with authorities only when the law requires it.
Cookies
We use only cookies that are needed for the service: a sign-in cookie, and the cookies Paddle's checkout sets when you buy. No advertising or cross-site tracking cookies.
Your rights
Depending on where you live (including under the Saudi Personal Data Protection Law and the EU and UK GDPR), you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict some processing, and withdraw consent where we rely on it. Email support@aokenlabs.com from the address on your account. We answer within 30 days. You can also complain to your data protection authority.
Deleting your account removes your email and usage records, except records we must keep for tax and accounting.
Security
Files are encrypted in transit and at rest, access is limited to the systems that process them, and they are deleted automatically. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
Children
The service is for adults (18 or over) and businesses. It is not directed at children.
Changes
If we change this policy, we update the date above, and for significant changes we email account holders before they take effect.