Encryption
Every connection to Extract.FAST uses TLS 1.3 with perfect forward secrecy, so your files are encrypted from the moment they leave your browser. On our servers, files are encrypted at rest with AES-256-GCM, and each file gets a unique key derived via HKDF-SHA256 with a random salt — so compromising one key reveals nothing about any other. During extraction, a file is decrypted only in memory and never written to disk in the clear. Extract.FAST encrypts your files in transit and at rest, automatically deletes them about an hour after your extraction finishes, and never uses them to train AI models.
Where your data lives
For most standard extraction, your files are stored and processed entirely on our dedicated servers in the European Union — they stream straight from your browser to our servers in Germany. GPS map reports may send GPS coordinate values to Mapbox from Extract.FAST servers for map imagery and temporary place labels. We do not send your photos, filenames, ZIP contents, browser session, or Extract.FAST account identity to Mapbox. Some AI-powered features send only the needed data to specialist providers: fast and quality transcription use GroqCloud, meeting intelligence and speaker separation may use Replicate, and AI analysis and generated titles run through Azure AI Foundry. Those providers are described below and on the Subprocessors page.
How your files are processed
Most extraction — text, images, metadata, and media from documents, images, archives, and more — runs entirely on our dedicated servers in the EU. GPS map reports may use Mapbox for server-side map rendering and temporary reverse geocoding of extracted coordinate values, without sending photos or account identity. AI-powered features use specialist providers under their data-processing terms. Fast and quality transcription use GroqCloud with Zero Data Retention enabled. Meeting intelligence and speaker separation may use Replicate, and AI analysis and generated titles run through Azure AI Foundry. See the Subprocessors page for the full list of providers.
Automatic deletion
Your uploaded files and the outputs we produce are automatically deleted about an hour after your extraction finishes — on every plan, free or paid — and we keep no backups, so once deleted they cannot be recovered. We keep only a small job record for billing and abuse prevention: the extraction type, file sizes, processing time, and credits used. We never store your file contents or your raw IP address — IPs are kept only as irreversible HMAC-SHA256 hashes.
No AI training. Ever.
We do not use your files to train, fine-tune, or improve any machine-learning model — ours or anyone else's. Your content is processed solely for the extraction you requested, then deleted. We don't scan, index, or analyze your file contents for advertising or profiling.
Your rights and contact
Under GDPR you can access your job metadata, delete your data, export your history, and object to processing. Extract.FAST is operated by Tools Fast Group (ABN 95 273 980 219). For privacy or security questions, email [email protected] or [email protected] — we respond within 30 days.
Frequently Asked Questions
Is my file encrypted while it uploads?
Yes. The connection uses TLS 1.3 with perfect forward secrecy, so your file is encrypted from the moment it leaves your browser, and it's encrypted again with AES-256-GCM once stored.
Does my audio leave your servers for transcription?
Some audio features leave our servers. Fast and quality transcription use GroqCloud with Zero Data Retention enabled, so Groq does not retain your audio or transcript. Meeting intelligence and speaker separation may use Replicate for the parts needed to create the transcript and speaker-labeled output. Most non-AI extraction stays on our EU servers; GPS map reports may send GPS coordinate values to Mapbox server-side for map imagery and temporary place labels. See the Subprocessors page for the full list.
Does Mapbox receive my GPS photos?
No. For batch aggregate GPS maps, Mapbox may receive GPS coordinate values from Extract.FAST servers for map imagery and temporary place labels. We do not send your photos, filenames, ZIP contents, browser session, or Extract.FAST account identity to Mapbox.
How long do you keep my files?
Your uploads and outputs are automatically deleted about an hour after your extraction finishes, on every plan, and we keep no backups.