Last updated 11 September 2026

Privacy policy

OneTex is a CV and document editor operated by ArgentFlow Limited (銀澤). This policy explains how we handle personal information when you use https://onetex.app, including Google sign-in, cloud projects, document processing, and billing. Contact argentflowltd@gmail.com with privacy questions.

Google sign-in

If you choose Google sign-in, Google provides your account identifier, email address and verification status, and basic profile information such as your name and profile image. Supabase processes this information for OneTex to create or recognise your account, maintain your sign-in session, display your profile, and associate your cloud projects and access permissions with you. OneTex does not request access to your Gmail messages, Google Drive files, contacts, or calendar. Signing in is optional for local browser editing.

What we store

Guest drafts stay in your browser. When you sign in, OneTex stores your account email, project documents, version snapshots, subscription status, and billing identifiers needed to provide cloud features.

CV imports

PDF and Word text extraction, including scan recognition, runs in your browser. When you import a CV while signed in or request automatic analysis, extracted text is sent through Vercel AI Gateway to the configured model provider (currently Google) to identify sections and group entries. The original file is not sent for this analysis. Basic formatting works locally without signing in. Imported text and review notes form part of your draft and are included when you save that draft to a cloud project. We cache section assignments and an input hash by account to avoid repeated model requests, and retain usage counters to limit analysis costs. Cached assignments expire after 30 days and are removed on your next analysis request; they contain line identifiers, not your CV text.

Document processing

When you request a PDF, the generated LaTeX and project figures are sent to an isolated compiler for the duration of that job. Temporary compilation files are deleted after the job and are not used to train models.

Signing and conversion records

When PDF signing is used, OneTex privately stores the PDF source, file metadata and SHA-256 hash, placement coordinates, signer-supplied name and reason, account identifier, completed PAdES-sealed PDF containing the visual marks, and a JSON audit record. The visual PNG is processed to create that completed PDF but is not stored as a separate reusable signature asset. The optional Signature Vault is different: its visual signature is encrypted with PBKDF2 and AES-256-GCM in the user's browser, its password is never sent to OneTex, and the encrypted vault remains on that device. A completed document can be shared through a revocable, unlisted link with someone who does not have a OneTex account. Format conversions retain a private source snapshot, output artifact, size, format, status, converter version, and SHA-256 hashes for up to seven days unless deleted sooner.

Payments

Stripe processes payment details. OneTex stores customer, subscription, status, and renewal identifiers, but does not receive your full card number.

Service providers and sharing

We use Supabase for authentication and cloud storage, Vercel for website hosting, and Stripe for payments. These providers process the information needed to deliver their services, including operational request records. Information may be processed outside your country. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. We share it only as needed to provide and secure OneTex, with your permission, or to meet applicable legal obligations. Other users do not receive access to private projects merely because you sign in; a document you deliberately share through a link is available to people who have that link until it is revoked.

Retention and deletion

Local drafts and local recovery copies remain in your browser until you remove them or clear site data. Cloud account information and saved projects remain associated with your account while you use the service; there is no fixed automatic account-expiry period. Deleting a cloud project removes that project from your cloud workspace but does not erase local copies on your devices. Contact us to request deletion of your account and associated personal information. We will verify that you control the account and explain any records that must be retained for payment, security, dispute-resolution or legal purposes. Removal from operational logs and provider backups follows their retention cycles rather than happening immediately when a workspace item is deleted.

Your choices and requests

You can sign out or switch accounts from the Account menu, change your display name there, and delete cloud projects from Cloud projects. You can remove OneTex access from your Google Account connections; revoking Google access does not itself delete information already stored in OneTex. To request access, correction, a copy of your personal information, or account deletion, email argentflowltd@gmail.com from your account email where possible. We handle requests according to the privacy rights that apply to you and may ask for information needed to verify your identity. You may also contact the relevant privacy authority about concerns.

Security

Cloud data and operational signing records are restricted by account ownership and server-only policies. Completed-document share links are authenticated with a server signature, indexed only by a token hash, and can be revoked. PDF seals use an append-only incremental revision, an ETSI CAdES detached signature dictionary, X.509, and SHA-256; modification remains technically possible but becomes detectable when the signature is independently validated. Compiler jobs disable shell escape, enforce size and time limits, and run in disposable directories.

Controller and contact

ArgentFlow Limited (銀澤). Privacy and account-deletion requests: argentflowltd@gmail.com.

Policy changes

We will update this page and its revision date when our data practices change. Material changes that require your consent will be presented before the new use takes place.