Privacy policy
Effective October 26, 2026. The controller for account and billing data is Atlantic Express Corp.. For the contents of documents you upload, we are your processor. Contact: hello@titleread.com.
Two kinds of data
There is a difference between data about you, our customer, and data about the people named in the documents you upload. For the first we decide how and why it is used, within this policy. For the second we act only on your instructions: you decide why those documents are read, and the responsibilities of the Driver's Privacy Protection Act and similar laws toward the people in them sit with you. This policy covers both.
What we collect about you
- Account: email address, password hash if you set one, workspace name, the time, IP address and browser of each sign-in, and the API keys you create (stored as hashes).
- Billing: the packs you buy, amounts, dates, refund status and a Stripe customer identifier. Stripe holds the card; we never see its number.
- Usage: what was uploaded and when, file names, sizes, page counts, how many vehicles were read, how long reads took, API requests and their status codes, webhook deliveries and their results.
- Support: emails you send us.
- Technical: server logs with IP addresses and request paths, kept 30 days, and error reports in which anything resembling a credential is removed before it leaves our server.
What is in the documents
Vehicle titles, bills of sale and related forms contain names, addresses, signatures, vehicle identification numbers, odometer readings, lien information and sometimes driver's licence or other identifiers of owners, buyers, sellers and lienholders. We extract this into structured results, render page images for your review screen, and keep both for the retention period you choose. We do not use it for any purpose of our own beyond operating and improving the service for you.
Why we use it, and the legal basis
| Purpose | Data | Basis |
|---|---|---|
| Providing the service: reading documents, showing results, delivering webhooks | documents, results, account | performance of our contract with you |
| Billing and accounting | billing, usage | contract; legal obligation to keep tax records |
| Security, abuse prevention, rate limiting | technical, account, usage | our legitimate interest in running a safe service |
| Improving accuracy using corrections you make, while the document is retained | corrections, documents | contract; your settings control retention |
| Service emails: sign-in links, receipts, notices about your account | email address | contract |
| Marketing emails about TitleRead, only if you signed up or asked for them; every one has an unsubscribe link | email address | your consent or our legitimate interest; you may opt out at any time |
We do not sell personal information, do not share it for cross-context behavioural advertising, and do not use your documents to train general-purpose models.
Who else sees it: sub-processors
| Provider | What they receive | Where |
|---|---|---|
| Hetzner Online GmbH (hosting) | everything above, on servers we control | Ashburn, Virginia, USA |
| Google LLC (Gemini API, paid tier) | document pages, to be read; not used for training under the API terms | USA |
| Stripe, Inc. (payments) | email, name, card details you enter on Stripe's page, amounts | USA |
| Intuit Mailchimp / Mandrill (email delivery) | email address, the text of emails we send you | USA |
| Functional Software, Inc. (Sentry, error monitoring) | error reports with credentials removed; never document contents | USA |
| Cloudflare, Inc. (encrypted backup storage) | encrypted database backups | USA |
We will email you at least 30 days before adding a sub-processor that would receive document contents.
How long we keep it
- Documents, page images, results, corrections: the retention window you set in Settings (1 to 365 days; 30 by default), or until you delete the document, whichever is sooner. Trial accounts: 1 day. Deleting a document also removes its options, metadata, corrections and webhook payloads.
- Account and billing records: while your account exists, then as long as tax and accounting law requires (generally 7 years for invoices).
- Usage records: while your account exists; they hold counts and sizes, not document contents.
- Server logs: 30 days. Sign-in links: 20 minutes, then purged. Sessions: 90 days.
- Backups: encrypted, rolled off within 14 days, so a deleted document leaves all copies within 14 days of deletion.
Security
All traffic is encrypted in transit. API keys, passwords and session identifiers are stored only as hashes. Each account can read only its own documents. The programs that parse uploaded files run with no access to our secrets. Access to production systems is limited to the operator and is by key only. Error reports have anything credential-shaped removed before they leave the server. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay and in any case within the time the law requires.
Cookies
We set one cookie, ts_session, which keeps you signed in. It is essential to the service, carries only a random identifier, and expires after 90 days or when you sign out. We use no advertising or analytics cookies and no third-party trackers on this site.
Your rights
You can delete any document at any time from the dashboard or the API, change your retention window, revoke keys, and change your email preferences. For anything else, including access to, correction, export or deletion of your account data, or closing your account, write to hello@titleread.com and we will respond within 30 days.
California residents have the right to know what personal information we collect and how it is used, to delete it, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA, so there is nothing to opt out of. Residents of the EU, UK and other jurisdictions with data-protection law have equivalent rights, the right to object to processing based on legitimate interest, and the right to complain to a supervisory authority. Transfers of such data to the United States rely on standard contractual clauses, available on request.
For personal information about people named in your documents, requests should go to you as the controller; we will help you honour them.
Children
The service is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children.
Changes
We will email the address on your account at least 30 days before a material change to this policy takes effect. Each version shows its effective date at the top.