Eofent Privacy Policy

Effective date: 11 August 2026 · Last updated: 26 August 2026

This Privacy Policy explains how Eofent LLC, a New Mexico limited liability company ("Eofent", "we", "us"), handles personal data when you use the Eofent Capture browser extension, any other Eofent applications, the eofent.com website, user accounts, and all related services we may offer (together, the "Service"). We are the data controller for the processing described here.

The short version: your captures stay on your device. We do not receive your screenshots, recordings, saved pages, or the content of the sites you visit. We ask for only what is needed to run accounts, verify plan entitlements, and improve our products — and nothing else unless you volunteer it, such as the optional profile in Section 2, which stays blank until you choose to fill it in.

1. What We Do Not Collect

What a piece of software sends us is a fact about that particular software, so this section names the product it is describing. A product we release later does not quietly inherit the promises below, and it does not quietly escape them either: it is described here, in its own subsection, before it ships.

Eofent Capture

• The content of your captures: screenshots, recordings, audio, PDFs, MHTML saved pages, and edited projects. These are created, processed, and stored locally on your device.
• Your browsing history or the content of pages you visit.
• Keystrokes, form entries, or passwords from web pages.

The extension requests browser permissions, such as access to the active tab, downloads, and storage, solely to perform captures and save files locally when you initiate them.

Text recognition runs entirely on your device. The recognition models for all eleven languages ship inside the extension, so reading text out of an image contacts no server at all.

The extension reaches two kinds of place and no others: the pages you tell it to capture or crawl, and eofent.com for your account and plan. It contacts no third party.

Eofent Capture sends us no usage analytics unless you switch them on. It arrives with sharing off, and while it is off nothing about which features you use, how often, or what you export is recorded or sent anywhere. If you do switch it on, what travels is a count of how many times you used a feature on a day and never what you captured. Section 2 describes it in full under “Usage statistics”, you can read everything we hold from your account page, and you can delete all of it there in one action.

Every Eofent product

If we ever introduce a feature, or release a product, that sends us anything from your device — your content through an optional cloud sync or sharing feature, or usage analytics from the software itself — it will be described in this Privacy Policy before it starts, you will be told as set out in Section 12, and it will be off unless you switch it on. Anything of this kind is a choice you make, not a default you have to find and undo. We would rather amend this document than describe things we do not do.

The eofent.com website

The website is not the software, and the commitment above applies to the software. eofent.com uses Cloudflare Web Analytics to count page views and to record which pages are read and which sites readers arrive from.

This is on by default, and we would rather say so plainly than leave you to find it. It measures a website; it does not track a person. It sets no cookies, builds no profile, follows you to no other site, and does not fingerprint your device — which is why it adds no cookie banner (Section 8). What we hold is a count, not an identity.

Eofent Capture is unaffected. It contains no analytics of any kind, as stated above, and installing it enrols you in nothing here.

2. What We Collect

Account data, if you create an account:

• Email address and password, stored hashed.
• Plan and entitlement status, and related billing status such as active, unpaid, or promotional.
• An optional profile, if you choose to fill one in: a name, date of birth, gender, country, city, and profession. Every field is voluntary and blank unless you enter it, you can change or erase any of them at any time from your account page, and none of it is required to sign in, to buy, or to get support. We use your name when we write to you; the rest only helps us understand who Eofent is for. It is never sold, never shared, and never used to decide what you pay.

Usage statistics from Eofent Capture, only if you switch them on:

• This is off when you install the extension. Nothing in this block happens until you turn it on yourself.
• Stopping and deleting are two separate choices, and both are one press. You can stop us collecting anything new while keeping what is already there, so that you can still read your own figures; or you can delete all of it, which stops the collecting as well. Neither is preselected and neither is hidden. If you stop without deleting, deleting stays available afterwards for as long as anything is held, and we go on collecting nothing in the meantime.
• What we receive is a count per feature per day, recorded against your account: that on 22 August you exported eleven PDFs and ran three text recognitions, for example. That is the whole of it.
• Which of your own installations sent it. Each copy of the extension makes up a random name for itself the first time it sends anything, and includes it. It is not derived from your device, your browser or anything about you, and it means nothing outside your own account. It is there because your totals are meant to add up across the machines you use: without it, the second machine to report a day would overwrite the first instead of adding to it. What it does reveal to us is how many copies of the extension you run, and it is deleted with everything else when you delete your statistics.
• What it can never contain: the content of a capture, a file name, a page title, a web address, anything you typed, or anything about the sites you visited. These are daily totals rather than a record of individual actions, so they cannot reconstruct what you did or in what order. The extension may only send counters whose names appear on a fixed list our server recognizes, and anything else is discarded on arrival rather than stored, so this limit is enforced by us and not merely promised on the extension's behalf.
• What we use it for, and nothing else: showing you your own totals on your account page; deciding which messages about Eofent you are shown there, such as pointing out the plan that removes a limit you keep reaching; deciding, across everyone together, what to build next and where the free plan's limits belong; and, if you have separately opted in to product email, helping decide which of those emails are worth sending you.
• Email takes both switches. Sharing your usage never puts you on a mailing list by itself, and opting in to email never turns on sharing. You can switch either off on its own, at any time, and unsubscribing from email leaves your statistics exactly where they are.
• What we will not do with it: decide what you pay, hand it to an advertising network, use it for ad targeting or to build a profile for anybody else's benefit, or sell it. The last three are not preferences we might revisit: they are what the Chrome Web Store's Limited Use rules require of us, and Section 4 says so.
• We look at the total, not at you. Our internal view of these figures can only show them added up across everyone who shares them. It has no way to display one account's activity.
• You can see everything held for you, and erase all of it, from your account page at any time. See Section 9.

Purchase data, if you buy a paid plan:

• Purchases are processed by our payment provider, Stripe. We do not receive or store your full payment card details. We receive confirmation of purchase, plan, and billing status.

Content you post publicly, if you choose to:

• Reviews and star ratings, comments, feature requests, bug reports, and votes on other people's requests, each recorded against your account.
• These are published on the product page for everyone to see. Your email address is shown in a shortened form, such as ex…@example.com, so the same person is recognizable across a thread without their full address being published. Do not post anything you would not want to be public.
• You can ask us to remove anything you have posted; see Section 9.

Website data:

• Standard server logs, including IP address, timestamp, and requested page.
• A count of failed sign-in attempts per IP address, so we can see an address repeatedly trying passwords and, where necessary, refuse it. We keep a running total per address per day, not a record of individual attempts: this cannot show when you tried to sign in or which account you tried, only that an address failed a certain number of times on a given day. Where we block an address, we keep the address, the reason, and when the block expires. Both are deleted after 90 days, the same window as the server logs above.
• A country-level location estimate on pricing pages. Our network provider (Cloudflare) derives an approximate country from your IP address, and pricing pages use it for one thing: pre-selecting which country's VAT to estimate in the displayed prices. It is used for that render and not stored, it never decides what you are charged (the checkout calculates the real tax from your billing details), and you can override it with the country selector on the page — your choice always wins over the estimate.
• Aggregate page-view analytics via Cloudflare Web Analytics: the page visited, the referring site, and coarse details such as country, browser, and device type. No cookies, no identifier that persists between visits, and nothing that identifies you personally.

Communications:

• Emails you send us for support or feedback, and your referral activity at account level if you take part in a referral program.

3. Why We Process It, and Our Legal Bases

Purpose	Data	Legal basis (GDPR)
Provide accounts and verify entitlements	Account data	Contract, Art. 6(1)(b)
Process purchases and prevent fraud	Purchase and account data	Contract; legitimate interests, Art. 6(1)(f)
Publish your reviews, comments, and requests, and improve the product from them	Content you post publicly	Contract, Art. 6(1)(b) — you asked us to publish it
Send service notices such as pricing changes, security, and terms updates	Email	Contract; legal obligation
Send product news or marketing	Email	Consent, Art. 6(1)(a) — opt-in, unsubscribe anytime
Show you your own usage, choose which Eofent messages you see, and decide what to build and where free limits belong	Daily counts of feature use	Consent, Art. 6(1)(a) — opt-in, switch it off at any time
Run referral or promotional offers	Referral activity	Contract, per the offer terms
Understand which pages of the website are read	Aggregate page views	Legitimate interests, Art. 6(1)(f) — no cookies, no profiling
Protect sign-in against password guessing and abuse	Failed-attempt counts per IP address	Legitimate interests, Art. 6(1)(f) — keeping accounts secure
Comply with law	As required	Legal obligation, Art. 6(1)(c)

We do not list every country's data protection law here. The Service is offered in several interface languages; that is a convenience and not a statement that we are established in, or target, any particular country. If the law where you live gives you rights beyond those described in this policy, contact us and we will honor them where they apply to us.

4. Browser Extension Platform Policies — Limited Use

Our use of information received from browser extension APIs adheres to the applicable browser vendor policies, including the Chrome Web Store User Data Policy and its Limited Use requirements. We do not sell user data, do not use it for advertising, and do not allow humans to read it except with your consent, for security purposes, or as required by law.

The opt-in usage counters in Section 2 fall under this too. They exist to operate and improve Eofent Capture, to show you your own figures, and to decide which messages about our own products are worth putting in front of you. They are never sold, never handed to an advertising network, and never used for ad targeting or to build a profile for anyone else's benefit. Our own internal view of them is aggregate only: it can show what everybody who shares does in total, and it cannot show one account's activity.

5. Sharing

We do not sell or rent personal data. We share it only with:

• Service providers acting on our instructions: hosting, content delivery, and email delivery for eofent.com.
• Cloudflare, which serves the website and, through Cloudflare Web Analytics, processes the aggregate page-view data described in Section 2 on our behalf.
• Our payment provider, Stripe, for purchases. Stripe acts as an independent controller for payment processing; see its privacy policy.
• Authorities, where required by law.
• A successor entity, in a merger, acquisition, or asset sale, under this policy's protections.

A current list of our service providers is available on request. We may change providers within the categories above without amending this policy; if we begin sharing with a new category of recipient, or in a way that materially changes how your data is handled, we will update this policy and tell you as described in section 12.

6. International Transfers

We are a US company, and our service providers may process data in the United States, the European Union, or other countries. Where data of EEA or UK users is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

7. Retention

• Account data: for as long as your account exists, then deleted or anonymized within 90 days of account deletion, except where retention is required for legal, tax, or fraud-prevention purposes.
• Content you posted publicly: kept while your account exists so the thread stays readable. Deleting your account removes your reviews, comments, requests, and votes with it.
• Usage statistics, if you switched them on: up to 400 days, then deleted automatically. That window exists so that your own account page can show you a full twelve months of your activity and compare a month against the same month a year earlier; it is not kept for longer than you can look at it. Choosing delete, on your account page or in the extension, removes all of it straight away instead. Choosing to stop collecting without deleting leaves what you already have, because you asked us to keep it, until you delete it or those 400 days run out.
• Server logs: up to 90 days.
• Your captures: entirely under your control on your device. Deleting the extension or its data removes them according to your browser's behavior. We hold no copies and cannot recover them.

8. Cookies

eofent.com sets only strictly necessary cookies, so there is nothing to consent to and no cookie banner:

• a sign-in session cookie, which exists once you log in;
• a cookie remembering the interface language you chose;
• a short-lived cookie used to complete a "sign in with Google" round trip safely.

We set no advertising, tracking, or analytics cookies, and neither does the extension. The website analytics described in Section 2 are deliberately cookieless, which is why they added no banner when we introduced them. If we ever add a non-essential cookie we will ask for your consent first, which is what a banner is for — and until then, showing you one would be asking permission for nothing. You can clear or block cookies in your browser settings, though blocking the session cookie will stop you staying signed in.

9. Your Rights

Depending on your jurisdiction, including under the GDPR, you may have the right to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent at any time. You can exercise these rights from your account settings or by emailing us, see Section 12. You also have the right to complain to your local supervisory authority — in the EEA your national data protection authority.

10. Security

We protect personal data with measures appropriate to the risk, including encryption in transit (TLS), hashed passwords, access controls, and the structural safeguard that capture content is not transmitted to us. No system is perfectly secure; we will notify you and the relevant authorities of a personal data breach where legally required.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes and Contact

We may update this policy. For material changes we will notify you by email or an in-product notice before they take effect. The "Last updated" date above reflects the current version.

Data controller: Eofent LLC 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA Email: contact@eofent.com