Privacy Policy

Last updated: September 2026

        The short version: we do not collect, receive, or store any of your data. Your documents never leave your browser. We have no servers, no database, no analytics, and no cookies. There is nothing to disclose because there is nothing to collect.
    

What data we collect

None. ZeroEgress runs entirely in your browser. All document processing, including AI inference, encryption, and redaction, happens locally on your device. No data is sent to any server during processing.

Cookies

ZeroEgress does not set any cookies. No first-party cookies, no third-party cookies, no tracking cookies.

Stored on your device

Three things are kept by your browser on your device, and none is ever sent anywhere: the app and the AI model files, in the browser's normal HTTP cache, so the model downloads once; if you run OCR on a scanned document, the OCR language file, in the browser's local database, so it too downloads once; and, if you enter custom entity patterns under Advanced options, those patterns, in the browser's local storage, so they are there the next time you open the page. Documents, extracted text, results and session keys are held in memory only and are gone when you close the tab. Clearing the site's data in your browser removes all three.

Analytics and tracking

ZeroEgress does not use Google Analytics, Cloudflare Analytics, or any other analytics or tracking service. We do not track page views, sessions, clicks, or any user behavior.

AI model

The NER (Named Entity Recognition) model is served from ZeroEgress's own origin, not from any third party. It is downloaded to your browser once on first load and cached locally. At runtime, ZeroEgress makes no network requests to any third party whatsoever: every asset, including the model, is served from this same origin, and the Content-Security-Policy restricts all connections to 'self'. After the initial download, the model runs entirely offline within the browser. No document content, and no network request of any kind, is ever sent to a third party.

Hosting

ZeroEgress is hosted on Cloudflare Pages as static files. Cloudflare may process standard HTTP metadata (IP addresses, request headers) as part of serving the page. This is standard web hosting infrastructure. Cloudflare's privacy policy applies to this infrastructure layer. No application-level data is collected or transmitted.

Data processing agreement

No DPA is required. ZeroEgress does not process any user data on any server. There is no data processor relationship because there is no processing on our side.

Verification

You can verify the zero-egress claim yourself: open your browser's DevTools, go to the Network tab, and process a document. You will see zero outbound requests containing document data during processing.

Children's privacy

ZeroEgress does not collect personal information from anyone, including children under 13.

Changes to this policy

If we ever change this policy, we will update the date at the top of this page. Given that our architecture collects no data, material changes are unlikely.

Contact

For questions about this policy, contact contact@zeroegress.ai.