Last updated: July 26, 2026
This policy explains what LabelCompare does with your data. It describes what the service actually does today, not what we intend to do later. Where a safeguard is not yet in place, we say so.
The controller for the processing described here is Apexdream ("we", "us"), reachable at hqwhuange@apex-dream.com. We have not appointed a representative in the EU under Art 27 GDPR.
We do not use your data for advertising, we do not sell it, and we do not profile you.
These are all of them. Your uploaded files are processed on infrastructure we operate; only the extracted text is sent to the AI provider below.
Our servers are in Hong Kong. Neither Hong Kong nor mainland China has an EU adequacy decision, so if you are in the EEA your data is transferred to a third country. We have not yet put Art 46 safeguards (such as Standard Contractual Clauses) in place for these transfers. We are working on it, and we would rather tell you than leave it unsaid.
We do not use your files or their contents to train any model of ours.
We cannot make that promise on behalf of DeepSeek. Its published terms do not commit to refraining from training on API input, and we have no agreement with it that says otherwise. If that matters to you, do not upload content you are not willing to have processed under those terms, and contact us: we can discuss routing your account to a provider that contracts for it.
An earlier version of this policy said flatly that your files are never used to train AI models. That went further than we could guarantee, and we corrected it.
Files and reports stay in your workspace so you can revisit past checks. We do not currently delete them automatically. You can ask us to delete specific jobs or your whole account at any time and we will do it within one month; deletion is handled manually today, so please email us rather than expecting a button. We keep billing records for as long as accounting law requires.
Traffic is encrypted with HTTPS. Passwords are stored hashed (PBKDF2). Traffic between our application server and our OCR service runs inside an encrypted tunnel and is never exposed to the public internet. Access to production systems is limited to authorised personnel.
If the GDPR applies to you, you have the right to access your data (Art 15), correct it (Art 16), erase it (Art 17), restrict processing (Art 18), receive it in a portable form (Art 20), and object to processing based on legitimate interests (Art 21). Email us and we will respond within one month; if a request is complex we may extend by up to two further months and will tell you within the first month. We may ask you to confirm your identity before acting.
We do not make decisions about you by automated means that produce legal or similarly significant effects. Reports are suggestions that you review and accept or reject yourself.
You can also lodge a complaint with your national data protection authority. The list is at edpb.europa.eu.
We set no advertising or analytics cookies. Your browser stores a login token and your language choice locally so the service works; both are strictly necessary and are cleared when you sign out or clear site data.
If we change this policy materially we will update the date above and note what changed.
hqwhuange@apex-dream.com, Apexdream