Home / Privacy Policy
Privacy Policy
This policy describes the current behavior of the LabelSaathi website and account system. Contact: seghelanupam@gmail.com.
1. PDFs and customer details
Your selected shipping label PDF and extracted names, addresses, PINs and Order IDs are processed in your browser. The tool does not upload the PDF or extracted text to the account server. PDF reviews are not sent to an external AI API.
Reports, CSV files and new batches are downloaded to your device. The account database does not store your PDF history. Closing or reloading the page can discard the current unsaved review. Downloaded files remain on your device; you are responsible for protecting, sharing and deleting them. Browser extensions and other software may behave differently.
2. Account information we store
| Information | Purpose |
|---|---|
| Name and email | Account identification and admin user management |
| Salted password hash | Password checks; the original password is not stored in the database |
| Recovery-code hash | Password reset verification; the original code is shown to you only when issued |
| User ID, role, creation time and last login | Account operation and access control |
| Session-token hash and expiry | Recognizing login sessions |
| Rate-limit keys, counters and expiry | Limiting repeated authentication attempts |
Email addresses are not currently verified. This is a website account, not Google/Gmail OAuth sign-in. Admins can view account names, emails, roles and account/login dates. The normal admin list does not expose password hashes, recovery hashes or session tokens.
3. Cookies and security processing
Login uses an essential cookie named __Host-lc_session. It lasts up to 7 days; logging out expires it. It uses Secure, HttpOnly and SameSite=Lax protections. Blocking essential cookies can prevent login.
Authentication rate limiting uses hashed bucket keys derived from the request IP address and, for some actions, email address. This is not a feature that stores raw IP addresses in the account database. Hashing should not be treated as a guarantee of complete anonymity.
4. Service providers and access
The site runs on Cloudflare Pages/Workers and stores account records in Cloudflare D1. Cloudflare may process IP addresses and request metadata to deliver and protect the website. See Cloudflare’s Privacy Policy. We do not guarantee that data stays exclusively in India.
If you send a support email, its sender address, message and attachments are shared with Gmail and the site admin. The browser-local PDF processing statement does not apply to files you choose to email to us.
5. Current advertising and analytics status
No Google AdSense or other ad-network code, advertising cookies or separate third-party analytics tracker has been added to this site. The Google Search Console verification tag confirms site ownership; it does not automatically enable ads or analytics tracking.
Before advertising is enabled, this policy will be updated to identify the services, data/cookies used, personalized advertising choices and consent controls where required. If Google ads are introduced, disclosures about Google and other vendors’ cookies and opt-out options will also be added. This policy does not mean advertising is currently active.
6. Retention and deletion requests
Account records are retained for service operation and account management. There is currently no fixed automatic account-deletion schedule. Session access becomes invalid after expiry, but database rows are not guaranteed to be physically deleted at that instant. Rate-limit records contain expiry information; no fixed physical-cleanup schedule is currently promised.
Contact us to request information, corrections or deletion. We may verify your identity. Applicable requirements or provider backups may prevent some records from being erased immediately. We do not promise instant deletion without reviewing a request.
7. Your choices
You can read public guides without an account. Log out after using the tool. Removing the session cookie removes the local login state, not the entire server-side account. Process only PDFs you are authorized to use, and minimize sensitive details in support messages.
8. Changes and contact
We will update this page and its date if data practices change. Send questions and requests through Contact.