clearOCR Terms of Service and DPA

clearOCR TERMS OF SERVICE

Effective date: March 1, 2026

This English version is provided for convenience only. In case of discrepancies, the Polish version shall prevail.

General Provisions
These Terms of Service (“Terms”) govern the use of the clearOCR service (“Service”) provided by:

TeamQuest Sp. z o.o.
ul. Srebrna 16 lok. 308D
00-810 Warsaw, Poland
KRS: 0000388856

(“Service Provider”, “we”, “us”, or “Company”).
By accessing or using the Service, you agree to be bound by these Terms.
If you are using the Service on behalf of a company or other legal entity, you represent that you have authority to bind that entity.
For the purposes of these Terms:

“Account” means a registered user profile enabling access to certain features of the Service.

“API” means the application programming interface made available by the Service Provider to allow programmatic access to the Service.

“API Key” means a unique authentication credential generated within the Account to access the API.

“Free Usage Credits” means the one-time promotional usage allowance granted to new users under Section 4.

1. Description of the Service

clearOCR is an automated Optical Character Recognition (OCR) service powered by artificial intelligence.

The Service allows users to upload image files or PDF documents for automated text extraction. The output generated by the system is referred to as “OCR Output”.
The Service:

is fully automated,
does not involve human review,
may contain errors or inaccuracies,
is provided on an “as-is” and “as-available” basis.

We may modify, suspend, limit, or discontinue the Service at any time.

2. Accounts and Access

Certain features require account registration.
You may create an account:

using email and password, or
via third-party authentication providers (e.g., Google, GitHub).

When using OAuth authentication:

We receive only data provided by the authentication provider (e.g., email, user ID, name if available).
We do not access or store your external account passwords.
Authentication is governed by the third-party provider’s own terms.

You are responsible for safeguarding your login credentials and API keys.
You may not share your account with third parties.

Each Account is personal and non-transferable. The Service Provider may suspend or terminate an Account in case of breach of these Terms, suspected abuse, or unlawful activity.

The Service Provider may apply reasonable anti-abuse and security verification measures (e.g., email verification, session validation, IP-based safeguards) where necessary to prevent fraud, misuse, or violations of these Terms.

Some parts of the Service may be available without an Account. We may use cookies, IP addresses, and session identifiers to ensure security and prevent abuse.

3. Free Usage Credits

New users may receive one-time Free Usage Credits.

The amount is determined by the current offer displayed on the website.
Free Usage Credits are valid for 30 days from account creation.
Unused credits expire automatically and cannot be restored.
Credits have no monetary value and are non-transferable.

Each user is limited to one account only.

Creating multiple accounts to bypass limits, obtain additional Free Usage Credits, or circumvent restrictions is strictly prohibited.
We may:

suspend or delete duplicate accounts,
revoke improperly obtained credits,
block access to the Service.

We may use technical verification mechanisms (including IP analysis and device identifiers) to prevent abuse.

4. API Access

The Service may be accessed via the API using an API Key generated within the Account.
You are responsible for:

securing your API key,
proper integration,
usage in accordance with documentation.

We may:

apply rate limits,
restrict bandwidth,
update or deprecate API versions (with 14 days’ notice unless urgent security/legal reasons apply).

API access must use HTTPS.
Deletion of your account automatically invalidates all associated API keys.
If a pricing model is introduced, API usage may be subject to billing under the applicable pricing plan.

Where the Service is subject to pricing, API usage may be metered and billed based on the number of processed requests, data volume, or other usage metrics as defined in the applicable pricing plan.

5. User Responsibilities

You are solely responsible for the content you upload.
You may not upload:

malicious code,
harmful or illegal content,
materials that infringe third-party rights,
files intended to disrupt or compromise system stability.

You represent that you have the legal right to process and upload any personal data contained in submitted documents.

6. Data Processing and Retention

6.1 Uploaded Files

Uploaded files and OCR Output are processed solely to provide the Service.
Files and OCR Output are typically deleted within 48 hours after processing, unless:

you provide explicit consent for development/training use,
retention is required to comply with legal obligations or to protect the security and integrity of the Service.

Where technically feasible, we remove EXIF data and other embedded metadata upon upload. We may also apply measures that reduce the risk of identification (such as separating technical metadata from content and applying pseudonymization) to the extent necessary to operate and improve the Service.

We do not log full file contents or full OCR Output in system logs.
Technical logs may include metadata such as:

request identifiers,
processing timestamps,
file size,
error codes.

6.2 Account and Technical Data

We process personal data such as:

email address,
account identifiers,
billing information (if applicable),
IP addresses,
API usage metadata,
system logs.

Legal bases under GDPR:

contract performance (Art. 6(1)(b)),
legal obligations (Art. 6(1)(c)),
legitimate interests (Art. 6(1)(f)),
consent (Art. 6(1)(a)) where applicable.

Technical and billing data may be retained:

for the duration of the service relationship,
as required by tax, accounting, or legal regulations,
for the establishment, exercise, or defense of legal claims.

Raw system logs may be retained for shorter periods (e.g., up to 90 days), unless needed for security or legal purposes.

Usage data associated with Accounts and API activity may be retained for the duration necessary to ensure billing accuracy, system security, fraud prevention, and compliance with legal obligations.

We may collect and use aggregated, anonymized statistical data regarding Service usage (such as number of processed files, processing times, and error rates) for service improvement purposes. Such data does not identify individual users.

7. Data Protection and GDPR

With respect to personal data contained in uploaded documents:

The user acts as Data Controller.
The Service Provider acts as Data Processor under Article 28 GDPR.

Data is processed exclusively to provide the Service, unless otherwise agreed.

International transfers outside the EEA are protected by appropriate safeguards, including Standard Contractual Clauses where applicable.

Users have the right to:

access,
rectification,
erasure,
restriction,
data portability,
object (where applicable),
withdraw consent,
lodge a complaint with a supervisory authority.

Contact: office@clearocr.com

8. Intellectual Property

You retain all rights to your uploaded files and OCR Output.
We retain all rights to:

software,
models,
infrastructure,
documentation,
proprietary technologies.

No license to our technology is granted beyond what is necessary to use the Service.

9. Liability

The Service is provided “as is”.
We do not guarantee:

error-free operation,
uninterrupted availability,
accuracy of OCR results.

To the maximum extent permitted by applicable law, we are not liable for:

OCR inaccuracies,
indirect or consequential damages,
loss of profits,
integration errors,
third-party service disruptions.

For business users, the total aggregate liability shall not exceed the fees paid for the Service during the three (3) months preceding the event giving rise to the claim.
Nothing in these Terms excludes or limits liability for willful misconduct or where such limitation is prohibited by applicable law.
Consumer rights under applicable law remain unaffected.

10. Complaints

Complaints may be submitted to:

office@clearocr.com

We will handle complaints within 21 business days of receipt.

11. Amendments

We may amend these Terms at any time.
Changes take effect 14 days after publication.
Continued use of the Service constitutes acceptance of the updated Terms.

12. Governing Law and Jurisdiction

These Terms shall be governed by the laws of Poland.
Any disputes shall be subject to the exclusive jurisdiction of the courts of Warsaw, Poland.
In case of discrepancies between the Polish and English language versions of these Terms, the Polish version shall prevail.

13. Termination

The User may terminate the agreement at any time by deleting the Account.
The Service Provider may suspend or terminate access to the Service in case of breach of these Terms, abuse, non-payment (if applicable), or legal requirements.
Termination does not affect provisions relating to liability, data retention, intellectual property, or dispute resolution.

ATTACHMENT 1
DATA PROCESSING AGREEMENT (DPA)

This Data Processing Agreement forms an integral part of the Terms of Service.

1. Subject Matter

The Data Controller (User) appoints TeamQuest Sp. z o.o. as Data Processor to process personal data contained in documents submitted to the Service.

2. Nature and Purpose

Processing consists of automated OCR-based text extraction.
Duration: limited to the time necessary to provide the Service (typically up to 48 hours), unless extended by consent.
Categories of data: any personal data contained in uploaded documents.
Categories of data subjects: individuals whose data appears in uploaded documents.

3. Processor Obligations

The Processor shall:

process data only on documented instructions,
ensure confidentiality,
implement appropriate technical and organizational measures (Art. 32 GDPR),
assist the Controller with data subject rights (Art. 15–22 GDPR),
assist with security obligations (Art. 32–36 GDPR),
notify the Controller of a personal data breach without undue delay after becoming aware of it,
delete or return data after service completion (subject to legal retention requirements),
make available to the Controller all information necessary to demonstrate compliance with Article 28 GDPR and allow for audits where legally required.

4. Subprocessors

The Controller grants general authorization for subprocessors necessary to operate the Service (e.g., hosting providers, infrastructure providers).
All subprocessors are bound by GDPR-compliant agreements.

5. Liability

Liability is governed by GDPR and the main Terms of Service.