Chronofill is currently in a pre-launch phase. This document is interim and may change at any time without notice. Continued use of the Service after any update constitutes acceptance.
Privacy Policy
Who we are
Chronofill (“we”, “us”, or “our”) is a product operated by Aurae Core, based in the Republic of Maldives. Chronofill is a software service that helps users quickly extract and structure data from documents in order to complete a downstream process.
For the purposes of this Policy, Aurae Core is the entity responsible for deciding how and why your personal data is processed (the data controller), and Chronofill is the product through which that processing takes place.
Scope of this Policy
This Policy explains what information we collect when you use Chronofill (the “Service”), including the Chronofill web application and our internal administrative and support systems, how we use that information, who we share it with, and the choices you have.
This Policy does not apply to:
- Third-party services, websites, or products that we link to or integrate with (see Section 8); or
- Documents and data that you choose to submit, beyond how we process them as described here.
Eligibility
The Service is intended for use by individuals and teams who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact and we will take reasonable steps to delete it.
Information we collect
We collect the following categories of information.
Information you provide directly
Account and profile information. When you create an account or set up your profile, we may collect your display name, email address, and time zone.
Broker / declarant profile information. If you choose to complete a professional profile, we may collect details such as your declarant or company name, declarant code, tax identification number (TIN), broker or professional licence number, office or port code, and registered business address. These fields are stored so they can be reused to speed up your work.
Extraction defaults and preferences. We store the configuration choices you make, such as default country, default currency, default commercial terms, notification preferences, and similar settings.
Account security information. When you set or change a password, that credential is handled securely by our authentication provider (see Section 8); we do not store your password in readable form.
Documents and content you upload
To provide the Service, you upload documents and files (for example, trade, shipping, commercial, and related documents). We process these files to extract, pre-process, and structure their contents. This may include:
- Pre-processing and image handling using tools such as OpenCV, PyMuPDF, and other document-processing libraries we use or adopt from time to time;
- Optical character recognition (OCR) and other text-extraction techniques;
- AI-assisted extraction, in which document content is processed using artificial-intelligence models (including models provided by Anthropic / Claude) to identify and structure the specific information you need.
The documents you upload may contain personal data, financial data, and commercially sensitive information relating to you or to third parties. You are responsible for ensuring you have the right to upload and process such content (see Section 11).
Billing information
Chronofill is offered with a 14-day free trial of limited usage. During the free trial we do not collect any billing or payment information.
If you continue using the Service after the trial, we collect billing information necessary to process payment, such as your billing name, billing contact details, plan selection, and transaction records. Payments are processed by the Bank of Maldives (BML) through its BML Connect payment gateway. Card details are entered only on BML’s own hosted payment page and are never received or stored by us, and we do not save cards for future payments; we receive only the transaction’s status, amount, and reference. See Section 8.
Information we collect automatically
When you use the Service, we and our infrastructure providers may automatically collect technical and usage information, such as log data, device and browser information, IP address, timestamps, error and diagnostic data, and information about how you interact with the Service. We use this for security, debugging, and to operate and improve the Service.
We also use Google Analytics, which sets cookies, to understand how visitors find and use our website and the Service (for example, pages viewed, approximate location, and device type). It does not receive the contents of your documents. You can opt out using Google’s browser add-on or by blocking cookies in your browser.
Support and administrative data
Through our internal administrative and support systems, we may access and retain account, usage, and document-related data for the purposes of providing support, investigating issues, and carrying out development and operations work. See Section 6 on retention.
How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service, including extracting and structuring data from your documents;
- Authenticate you and secure your account;
- Pre-fill and reuse profile fields you have provided to make your workflow faster;
- Learn from your usage patterns to improve extraction quality for your account (for example, recognising recurring values or formats);
- Process payments and manage subscriptions after the free-trial period;
- Provide customer support and respond to your enquiries;
- Send you service-related and, where you have opted in, optional notifications (such as completion alerts, review prompts, quota alerts, summaries, and product updates);
- Monitor, debug, secure, and improve the Service;
- Comply with applicable legal obligations and enforce our terms.
Data retention
Uploaded documents and extracted data. As a general rule, documents you upload and the data extracted from them are retained for approximately 24 hours in the main Service, after which they are deleted or scheduled for deletion in the ordinary course.
Administrative and support data. Our internal administrative systems may retain certain data for a longer period where reasonably necessary for support, debugging, security, abuse prevention, billing, and development and operations purposes. We aim to keep such data only for as long as it is needed for those purposes.
Account and billing records. Account information and billing/transaction records may be retained for as long as your account is active and thereafter for any period required to comply with legal, tax, accounting, or regulatory obligations (including recordkeeping requirements under applicable Maldivian law).
Retention periods may change as the Service evolves. Where you ask us to delete your data, we will take reasonable steps to do so, subject to any legal obligations that require us to retain it.
Legal basis and your responsibilities
We process personal data where we have a lawful basis to do so, including: to perform our contract with you (providing the Service); with your consent (for example, for optional notifications); to comply with legal obligations; and for our legitimate interests in operating, securing, and improving the Service.
Where the documents you upload contain personal data about other people, you are acting as the party responsible for that data and confirm that you have the necessary rights and lawful basis to provide it to us for processing.
Third-party services and processors
Chronofill relies on third-party service providers to deliver the Service. These providers process data on our behalf or as independent providers, according to their own terms and privacy practices. They may collect and process data in ways determined by them, and such processing is outside our control and responsibility to the extent it is governed by their own policies. We encourage you to review their privacy policies.
| Provider | Purpose |
|---|---|
| Anthropic (Claude / Claude Code) | AI-assisted text extraction and processing |
| Supabase | Authentication, database, and storage |
| Vercel | Frontend application hosting |
| Render | Backend application hosting |
| Upstash / Redis | Caching and task queuing |
| Bank of Maldives (BML) | Payment gateway / banking infrastructure |
| Google Analytics | Website usage analytics |
This list may change as we add, remove, or replace providers. We are not responsible for the independent acts or omissions of these third parties, nor for data they collect under their own policies. We do, however, take reasonable steps to work with providers that maintain appropriate security and privacy practices.
We do not sell your personal data.
International data transfers
Some of our providers store or process data outside the Republic of Maldives. Where data is transferred internationally, we take reasonable steps to ensure it remains protected consistent with this Policy and applicable law. By using the Service, you acknowledge that your data may be processed in other countries.
Security
We take reasonable technical and organisational measures intended to protect your information against unauthorised access, loss, or misuse, including secure authentication and limiting access to data on a need-to-know basis. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If you become aware of any security issue or suspected breach, please contact promptly.
Your choices and rights
Depending on applicable law, you may have rights to access, correct, update, or delete certain personal data we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
You can:
- Update much of your profile and preference information directly within the Service;
- Adjust your notification preferences in your settings;
- Request access to or deletion of your personal data by contacting .
We will respond to such requests in accordance with applicable law. We may need to verify your identity before acting on a request, and we may decline requests where permitted by law (for example, where we must retain data to meet a legal obligation).
Compliance with Maldivian law
We aim to operate in good-faith compliance with the laws of the Republic of Maldives applicable to our activities. The Maldives is in the process of developing comprehensive data-protection legislation; as such laws come into force, we will take reasonable steps to align our practices with them. In the meantime, we apply reasonable practices informed by recognised data-protection principles.
Nothing in this Policy limits any rights you may have under mandatory provisions of applicable law.
Changes to this Policy
Because Chronofill is in active development and pre-launch, we may update this Policy at any time. When we make material changes, we will update the “Last updated” date above and, where appropriate, take additional steps to notify you. Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.
Contact us
If you have questions about this Privacy Policy or how we handle your information, please contact Aurae Core.