Privacy & data

Reorder is built so your documents stay yours. Here is exactly what happens to them.

1 · Reading your files

On your computer

Opening, listing, reading, hashing and unpacking documents all happen inside the app on your machine. No file is uploaded, copied to a server or stored anywhere else.

  • • The files themselves never leave your computer.
  • • Full paths, drive letters and your user name never leave your computer.
  • • Executables, system files and hidden files are skipped entirely.

2 · Reading scans (OCR)

On your computer

Scanned PDFs and photographed paperwork are read by a text-recognition engine that runs inside the app. Page images are never sent anywhere.

  • • The first time a language is needed, the language data file is downloaded from the Tesseract CDN. That request contains no content of yours.
  • • Only the recognized text may then continue to step 3, exactly like text typed in a normal document.

3 · Checking for sensitive information

On your computer

Before anything may be sent, Reorder checks the text it read locally for identity papers, bank details, payslips, tax and medical documents, insurance and legal papers, and anything that looks like a password, key or token.

  • • The check itself is entirely local — no content is ever sent out to decide whether it is sensitive.
  • • A sensitive file is organized from its document type, date, file type and filename alone, and its content is never sent.
  • • Anything credential-like is never sent under any setting, not even if you ask for it.
  • • If local information is not enough, the file goes to Needs Review instead of being guessed at.

4 · Understanding an ordinary file (AI)

Sent to the AI service

This is the one step where information can leave your computer, and it only happens for ordinary, non-sensitive files while you are analyzing a folder — and never at all in Strict Privacy.

  • • Sent: a cleaned excerpt from the beginning of the document, at most 1,800 characters.
  • • Removed before sending: email addresses, phone numbers, IBANs and account numbers, card numbers, identity numbers, street addresses, passwords, keys and tokens.
  • • Sent for photos only: one downscaled preview, at most 640 pixels wide. Pictures that look like a document, or whose recognized text looks sensitive, stay on this device and travel as redacted text instead.
  • • Sent: the file type and modification date, plus the file name only after it has been cleaned on this device — personal names, emails, phone numbers, account and employee numbers, addresses, health words and secrets are replaced, and a name that would lose its meaning is not sent at all.
  • • Never sent: folder names or your folder structure, the file itself, whole documents, full-resolution images, absolute paths, your user name, your computer name, or any account identifier.
  • • Nothing is sent in demo mode, in Strict Privacy, or for a file that has not changed since it was last analyzed.

5 · Product statistics

Off by default, stored locally

Anonymous statistics are switched off unless you turn them on, and even then nothing is transmitted automatically — the numbers stay on your computer until you choose to export a summary and share it.

  • • Only counts, timings and scores: number of files, review rate, quality score, durations, token counts and estimated cost.
  • • Never: file names, folder names, document contents, recognized text or personal names.

AI processing

Choose how much may ever leave this computer. Sensitive protection stays on unless you switch it off.

Beta statistics

Optional and off by default. When switched on, Reorder keeps counts and timings of your runs on this computer — how many files, how many needed review, how long a scan took, the quality score. Never file names, folder names, document contents or personal names. Nothing is transmitted automatically; a summary leaves this computer only if you export it and send it yourself.

Anonymous id for this installation: · 0 runs recorded · 0 feedback votes (0 correct, 0 wrong, 0 corrected)

Delete Reorder local data

Removes everything Reorder stores on this computer: history and undo information, settings, stored analyses, your corrections, statistics and any interrupted scan. Your actual files are never touched — but runs already applied can no longer be undone.