Privacy Policy
Effective date: 23 May 2025 · Last updated: 23 May 2025
01Who We Are
CamteX ("we", "us", "our") operates the CamteX web application available at camtex.app. For privacy inquiries, contact us at [email protected].
02Data We Collect
Account & Authentication
- –Email address— used to send your one-time login code and identify your account. We do not store passwords.
- –Session token— a secure random token stored in an HTTP-only cookie to keep you logged in.
- –Device identifier— a fingerprint used to enforce per-device session limits.
Usage Data
- –Scan count— the number of AI recognition requests you have made, used to enforce plan limits.
- –Projects & documents— LaTeX content and canvas images you save are stored in our database and cloud storage associated with your email address.
Payment Data
Payment processing is handled entirely by Stripe. We do not store your card number, CVV, or other sensitive payment details. We receive only confirmation of a successful payment and the associated email address to grant Pro access.
Analytics
We use PostHog to collect anonymized product analytics (page views, feature usage, conversion events). PostHog data is linked to a randomly generated identifier, not directly to your email address, unless you are logged in. You can opt out via your browser's Do Not Track setting or by contacting us.
AI Processing
When you use the AI recognition feature, your canvas image is sent to a third-party AI provider (currently Google Gemini or Mathpix) for processing. Images are not stored by us beyond the duration of the API call.
03How We Use Your Data
- –Authenticate you and maintain your session.
- –Enforce plan limits (scan quotas, session limits).
- –Store and retrieve your projects.
- –Process payments and grant Pro access via Stripe webhooks.
- –Send transactional emails (login codes) via Resend.
- –Analyse product usage to improve the Service (PostHog).
- –Send occasional product newsletters, if you opted in at registration.
04Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process your data under the following legal bases:
- –Contract performance — to deliver the Service you signed up for.
- –Legitimate interests — to secure the Service, detect abuse, and improve the product.
- –Consent — for newsletter communications (you may withdraw at any time).
05Data Sharing & Third Parties
We share data only with the following sub-processors:
- –Supabase — database and file storage (EU region available).
- –Stripe — payment processing.
- –Resend — transactional email delivery.
- –Google Gemini / Mathpix — AI image recognition.
- –PostHog — product analytics.
- –TeXLive.net — server-side LaTeX-to-PDF compilation (your document code is sent for the duration of the request).
- –OpenAI — voice-to-LaTeX transcription (audio is sent for the duration of the API call).
- –Sentry — error monitoring and crash reporting.
- –Upstash — rate-limiting and session-cache infrastructure (Redis).
- –TeXLive.net — LaTeX PDF compilation (document content transmitted per request).
We do not sell your personal data to any third party.
06Data Retention
- –Account data is retained for as long as your account is active.
- –Sessions expire after 24 hours of inactivity or upon logout.
- –OTP codes expire after 15 minutes and are deleted after use.
- –You may request deletion of your account and all associated data at any time (see Section 7).
07Your Rights
Under GDPR and other applicable laws, you have the right to:
- –Access — request a copy of the personal data we hold about you.
- –Rectification — correct inaccurate data.
- –Erasure ("right to be forgotten") — request deletion of your account and data.
- –Portability — receive your data in a machine-readable format.
- –Objection — object to processing based on legitimate interests.
- –Withdraw consent — unsubscribe from newsletters at any time.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
08Cookies
We use one essential cookie: camtex_session — an HTTP-only, Secure, SameSite=Strict session token required for authentication. This cookie is not used for advertising.
PostHog may set analytics cookies. You can disable these in your browser settings.
09Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated by email or a notice in the application. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
11Contact & Supervisory Authority
For privacy questions, contact [email protected].
If you are located in the EU/EEA and believe your rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. In Poland, this is the Urząd Ochrony Danych Osobowych (UODO) at uodo.gov.pl.