Privacy

Crosscheck is a demo. Fahim Faiyaz builds and runs it from Bangladesh. Please upload sample documents only.

• Your email and a hashed password. With Google sign-in, also your name and picture.
• Your files and the data read from them.
• Your corrections and vendor date settings.
• The AI's first reading of each file. I compare it with your corrections to measure how often the AI is wrong.
• The time of each upload. This is for the daily limit.
• Your webhook address and its secret, if you add one. Both are encrypted.

No ads. No tracking. Cookies only keep you signed in.

Supabase stores it in Mumbai, India. Only you can see your documents.

• Google Gemini reads each file. This demo uses the free plan. On it, Google may use files to improve its AI. People at Google may also see them.
• Google Gemini, Groq or OpenRouter answers assistant questions. They get your question and the data read from your documents, never the files. This demo uses their free plans.
• Gmail sends the sign-up and reset emails.
• Supabase stores the data and handles sign-in.
• Render runs the server that receives your files, in Singapore. It does not keep them.
• Vercel hosts this website. Your files do not pass through it.
• Your webhook, if you add one, gets the data read from each file. Not the file itself.

Nothing is sold or shared with anyone else.

Until you delete it. Deleting a document removes it right away. Deleting your account removes everything.

Assistant chats are kept until you delete them, one at a time or all at once.

You can view, fix, export and delete your data in the app. For anything else, contact me on GitHub.

Bangladesh's Personal Data Protection Act 2026 is new. Its rules are still coming into force. This page is not legal advice.