Misfora does not store document images or recognized document data. It keeps only limited technical metadata about requests, which is deleted automatically after 12 months.
Retention periods
| Data | Stored where | Retention | How it is deleted |
|---|---|---|---|
| Document image | Server memory only | Duration of one request | Discarded when the request ends; never written to the database, file storage or application logs |
| Temporary file of the fallback recognition step | Application container | Seconds, within one request | Deleted automatically before the response, including on errors; container storage is cleared on restart and deployment |
| Recognized document data | Server memory, then the API response | Duration of one request | Discarded when the request ends; never stored or logged |
| Request metadata (time, client company, request ID, SDK session ID, document type, engine, processing time, review flag, capture method, file size, error code) | Misfora database, EU | 12 months | Automatic daily deletion of records older than 12 months |
| SDK session records (token hash, allowed document types, attempts, expiry) | Misfora database, EU | 12 months after expiry | Automatic daily deletion |
| Database backups | Hosting provider, EU West (Amsterdam, Netherlands) | Daily backups 6 days, weekly backups 27 days | Expire automatically |
| Hosting platform logs (client IP address, request time, application log lines without document data) | Hosting provider (Railway), United States | Up to 90 days | Deleted by the provider; cannot be deleted earlier on request |
| Client account data (company, contact email, hashed API key, allowed websites, limits) and billing records | Misfora database, EU | Term of the agreement; billing records as required by law | See below |
A record deleted from the database may remain in backups until the backup expires — at most 27 days.
Deletion on request and at the end of the agreement
- On the client's written request, Misfora deletes the client's technical request records within 30 days and confirms deletion in writing.
- When the agreement ends, Misfora deactivates the client's API keys immediately and deletes the client's technical request records and SDK session records within 30 days. Billing records are kept as long as required by law.
- Data subject requests. Misfora holds no document images or recognized data, so it cannot locate an individual's data by name or document number. Requests from data subjects are forwarded to the client, as controller.
Related obligations
- Statistics available to the client through
GET /v1/usagecover at most the last 12 months. - Monthly quota counters are stored separately from the request log and are not affected by deletion.
Review
This policy is reviewed at least once a year and whenever the processing changes.
A Data Processing Agreement for the Web Scanner SDK and OCR API is available on request: partners@misfora.com. Report security issues to security@misfora.com. See also the Privacy Policy.