Privacy policy
Operator: Qiang Xu (徐强), an individual operator based in mainland China. Support, billing and privacy: yuweijiuba@gmail.com. Version 1.1 · Effective: 15 October 2026.
1. Who processes your data
Qiang Xu (徐强) is the operator and data controller for TableMint. Contact the email above for access, correction, deletion, export or a privacy concern. We aim to respond to verified requests within 30 calendar days, subject to applicable requirements and any explained lawful extension.
2. Data we actually handle
We process uploaded image or document pages, relevant file names, extracted tables, edits submitted for server processing and requested export files. We use a signed guest-session cookie, request timestamps, salted IP-derived identifiers, processing status and aggregate model usage to run the service and control abuse and costs. Netlify may receive IP addresses and operational request data as the hosting provider. If you email support, we receive the information you send. Email-code sign-in creates a Supabase Auth account. Supabase processes your email, authentication requests and session tokens; Resend delivers the sign-in email. This site links a derived account identifier to free-call counters, credit balances and verified payment records. We do not use advertising trackers or collect full payment-card details.
3. Purpose and providers
Processing is used to deliver the conversion you request, maintain secure access, enforce quotas, provide support and comply with law. Netlify hosts the site, functions, temporary private storage and the account-linked credit ledger. Supabase provides authentication and Resend delivers transactional sign-in emails; these services may process data outside your country. DeepSeek receives relevant images and extraction instructions and returns recognition output. Their infrastructure may be outside your country; DeepSeek’s published policy describes processing in mainland China. We do not promise that a third-party provider deletes data on our temporary-storage schedule or never uses it for its own purposes. Review the linked provider policies before uploading; avoid sensitive documents. Waffo Pancake will process payment data only when paid checkout is enabled.
4. Storage and retention
Temporary server tasks expire after one hour. Inputs are deleted after a completed task, and the client requests result deletion after retrieval. Expired or orphaned files are removed by an hourly cleanup job; physical deletion can take longer during service failures. Daily abuse-control and aggregate usage ledgers are kept for up to 30 days by scheduled cleanup and contain no document text or images. Accounts and credit balances persist while you use the service; request account deletion via the contact above. Transaction records may be retained as required for refunds, disputes and legal obligations. Hosting, authentication, email and model-provider logs are governed by those providers’ terms and settings. We retain support correspondence only as needed for handling the request, disputes and applicable legal obligations.
5. Your device and cookies
Strictly necessary tm_auth cookies (including chunked variants) keep the signed-in session and are set with Secure and HttpOnly attributes, with a cookie lifetime of up to seven days; activity may refresh the session. Signing out clears them on this device. A legacy signed guest-session cookie, tm_session, lasts up to 24 hours. Language preference is stored on your device. Workspace saving is optional and initially off; enabling “Keep on this device” stores images and edits in the browser until you clear them or browser storage is removed. Downloaded spreadsheets and saved project files remain wherever you save them; we cannot remotely delete your downloads. Clear the workspace and use browser storage controls to remove local copies.
6. Security and sharing
We use HTTPS, private temporary storage, signed session identifiers and access checks. No system can guarantee absolute security. We do not sell personal information or share documents for advertising. We may disclose information when legally required or to protect the service against fraud. We do not use uploaded documents to train our own models. We have not represented the service as holding an unverified certification or a special cross-border legal approval.
7. Children, changes and provider policies
The service is intended for adults. If you believe a minor submitted information, contact us for review and appropriate deletion. Material policy changes will be announced on this site. Provider policies: Netlify, Supabase, Resend, DeepSeek, and Waffo Pancake documentation.
中文 · 隐私政策
经营者：中国大陆个人经营者徐强（Qiang Xu）。客服、账单及隐私联系：yuweijiuba@gmail.com。版本 1.1 · 生效日期：2026 年 10 月 15 日。
1. 谁负责处理数据
TableMint 的经营者和数据控制者为徐强（Qiang Xu）。可通过上方邮箱申请访问、更正、删除、导出或提出隐私问题。核实归属后以 30 个自然日内回复为目标，遵守适用要求；合法延期会说明原因。
2. 实际处理的数据
我们处理上传的图片或文档页、相关文件名、识别表格、为服务端处理而提交的修改及所需导出文件。使用签名访客会话 Cookie、请求时间、经加盐转换的 IP 标识、处理状态和汇总模型用量，提供服务并控制滥用及成本。托管商 Netlify 可接收 IP 和运行请求信息。邮件联系客服时会接收你发送的信息。邮箱验证码登录会建立 Supabase Auth 账户。Supabase 处理邮箱、认证请求及会话令牌，Resend 发送验证码邮件；本站将派生的账户标识与免费次数、已购余额及已核实支付记录关联。不使用广告追踪器，不收集完整支付卡资料。
3. 目的及服务商
处理目的为交付所请求的转换、保持安全访问、执行限额、提供支持和遵守法律。Netlify 托管网站、函数、临时私有存储及账户关联的额度账本；Supabase 提供身份认证，Resend 发送登录验证码邮件，这些服务可能在你所在国家以外处理数据；DeepSeek 接收相关图片和提取指令并返回识别结果。供应商基础设施可能位于你的国家之外；DeepSeek 已发布政策说明在中国大陆处理数据。我们不承诺第三方与本站临时存储遵循相同删除时间，也不保证第三方不作其他用途。上传前请阅读供应商政策并避免敏感文档。Waffo Pancake 仅在付费结账启用后处理支付信息。
4. 存储及保留
服务端临时任务一小时后失效；任务完成后删除输入，客户端取回结果后请求删除结果。每小时清理过期或孤立文件；故障期间物理删除可能延迟。每日滥用控制及汇总用量记录通过定时清理保留最多 30 天，不含文档正文或图片。账户及额度余额在使用服务期间持续保存，可通过上方邮箱申请删除账户；退款、争议及法定义务所需交易记录可能继续保留。托管、认证、邮件及模型服务商日志按各自条款及设置处理。客服通信仅按处理问题、争议和适用法定义务所需保留。
5. 设备存储及 Cookie
必要的 tm_auth Cookie（含分块名称）保存登录会话，使用 Secure 及 HttpOnly 属性，Cookie 有效期最长七天，活动时可能刷新；退出登录会清除当前设备上的认证 Cookie。旧版签名访客 tm_session Cookie 最长 24 小时。语言偏好保存在设备上。工作区保存可选且初始关闭；开启“保存在本机”后，图片和修改留在浏览器，直到清理工作区或移除浏览器存储。已下载的电子表格和项目文件留在你选择的保存位置，我们无法远程删除下载文件。可清理工作区，并使用浏览器存储设置移除本地副本。
6. 安全与共享
采用 HTTPS、私有临时存储、签名会话标识及访问校验，任何系统均无法保证绝对安全。我们不出售个人信息，也不为广告共享文档；依法或为防范欺诈保护服务时可能披露必要信息。用户上传的文档不用于训练自有模型，不声称取得未核实的认证或专项跨境批准。