Is online OCR safe for your documents?

What should I check before I upload?

Four questions cover almost every risk. Most privacy policies answer them in a few lines, often under headings like “Data retention” or “How we use your information”.

1. How long is the file kept? Look for a stated period and the word “automatically”. “We may retain data as long as necessary” is not an answer.
2. What is the file used for? The policy should list the uses. If it allows using uploads for anything beyond processing your request, such as improving products or training models, decide whether you accept that.
3. Who can see the result? Check whether results are private to you and whether a shared link opens them for anyone who has it.
4. Can you delete it? You should be able to delete your account and its data, and the policy should say how.

What are the red flags?

• No privacy policy, or one that does not mention uploaded files at all.
• No retention period, or “indefinitely”.
• Rights to use, share or publish your content beyond providing the service.
• A plain http:// address instead of https://, or a browser warning on the upload page.
• Pressure to install a browser extension or desktop program from an unknown publisher just to convert one file.

What does FastOCR do with an upload?

Here it is plainly, taken from our privacy policy.

We use cloud providers for hosting and for reading the text, and share only what each one needs to do its job. We do not use advertising trackers or sell your data.

When should I use an offline tool instead?

When the rule is that the document must not leave your computer: identity documents, medical records, client files under a confidentiality agreement, or anything your employer’s policy covers. Mac and Windows both include an OCR engine. The free FastOCR apps for Mac and Windows use it to read documents on your computer, so your files and their text are never sent to us. The only thing the apps send is a daily update check.

The trade-off is coverage. Built-in engines read Latin-script languages well, but several scripts, including Hindi, Urdu and Farsi, are not supported on either system. For those, a website is often the only practical choice, so the checklist above matters more.

What about IDs, medical records and bank statements?

• IDs and passports: prefer an offline tool. If you must upload, crop the photo to the part you need.
• Medical records: check whether your organisation requires a signed agreement with any provider that handles patient data. A general OCR site usually does not offer one.
• Bank statements: first ask whether you need a converter at all. Many banks let you download transactions as CSV or OFX for recent months, which is the bank’s own data and needs no upload anywhere.