Last Updated Date: July 20,2026

Effective Date: August 19,2026

 

CamScanner Privacy Policy

 

Welcome to use CamScanner, which is provided by INTSIG Information Co., Ltd.. We are committed to protecting the privacy of your data. This Privacy Policy explains what information CamScanner collects, use, and disclose about you when you access or use our websites and applications (collectively, “Our Services”).

 

This Privacy Policy covers the following topics:

1. What data do we collect?

2. How we use your data?

3. Enterprise-Customer-Controlled Data That Enterprise Customers Entrust Us to Process

4. Security of Your Data

5. How We Store Your Personal Data

6. How We Share Your Personal Data

7. What Are Your Rights and Choices

8. How We Process Children's Data

9. How We Serve Advertisements

10. Cookies and Tracking Technologies

11. Cross-border Data Transfers

12. Changes to This Privacy Policy

13. How to Contact Us

14. Additional Notice for California Residents (How We Comply with CCPA)

15. Additional Notice for EU/EEA Residents (How We Comply with GDPR)

16. Additional Notice for Brazilian Residents (How We Comply with LGPD)

1. What data do we collect?

There are three basic categories of data we collect:

(a)Information that you voluntarily provide to us

Registration and login information. When you create your account for registering to use Our Services, depending on how you choose to create it, we may collect your password, e-mail address or phone number. In addition, when you log in to your account, we may collect your login information. If you log in with a third-party account, we may collect the third-party account information you choose to associate (Google, Facebook, Apple ID).

User-uploaded content. When you use Our Services to scan documents or images for recognizing text automatically (OCR) or to use cloud sync, we will collect the files (such as documents or images) which you choose to take or upload when you sync files. When you use Our Services for document format conversion, document editing (including adding watermarks, erasing, and merging) and other document-processing features, we will collect the documents you choose to upload, as well as your file naming, display settings, PDF settings, tag settings, and storage-location information. Please note that we process your uploaded content solely to provide you with storage and technical processing (such as OCR recognition).

Transaction information. If you purchase the paid services provided by us, we may receive information about your transaction such as when it was made or when a subscription is set to expire, as well as the details of the services you purchased, such as the benefits you are entitled to, including scanning, conversion, editing, and translation.

Input content. When you use AI-related features, we collect the input information and files you actively provide in order to provide you with AI-related services, such as answering your questions.

Contact information. We may record your e-mail address when you contact us for service support, making a complaint, suggestion or feedback to us by sending emails to help us keep contact with you for updates and support to resolve your queries for use of our Services.

Help and feedback information. When you submit help and feedback information through the relevant page, we collect the content of your help requests and feedback, including text, images, and contact information, to help resolve your issues and feedback.

(b) Information that is collected automatically

Device data. We collect certain information about the device you use to access Our Services, such as your IP address, mobile carrier, time zone settings, model of your device, the device system, network type, Android ID, identifiers for advertising (such as IDFA for iOS, GAID for Android device), to ensure the security and compatibility of your use of the relevant Services.

Location Information. When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings. For example, your IP address may indicate your general geographic region. Upon your permission, we may collect your mobile device’s location. You may choose not to share your location details with us by adjusting your mobile or desktop device’s location services settings. For instructions on changing the relevant settings, please contact your service provider or device manufacturer.

Information Collected Using Cookies. Like many website owners and operators, we use automated data collection tools such as Cookies to collect certain information.

(c) Data we get from third parties.

Social Media and Login Services. If you choose to sign in using third-party social networks or services (Google, Facebook, Apple ID), we may collect information from those services, including your login or registration information for those services.

Information Received from Our Partners and Other Third Parties. We may link your subscription information with the data information we receive from our partners or other third parties (such as Firebase provided by Google) to help smoothly facilitate Our Services for you, to better understand your needs and to provide you with better Services experience. Use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

 

2. How we use your data?

2.1 Legal Basis

We will only use your personal data where it is permitted by law. In most cases, our legal basis will be one of the following:

2.2 Purposes for Which We Use Your Data

We generally use the information we collect:

We may also use your information for other purposes. We use your information only when we have a valid legal basis. The ways in which we plan to use your personal data and the corresponding legal bases are described below:

 

(a) Registration and login

Data types involved:

Purpose: For user registration, account creation and login; and for profile management.

Legal basis: Necessary to perform the contract between CamScanner and the user for the purpose of creating a profile and providing products/services (only in relevant jurisdictions).

Retention period:

(b) Scanning, uploading, converting, and editing files

Data types involved: Files you actively choose to scan or upload (such as documents, images, etc.).

Purpose: To scan, upload, convert, and edit your files.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you (only in relevant jurisdictions).

Retention period: Until you actively delete the files or delete your account, whichever is earlier.

(c) Cloud sync

Data types involved: The content you actively choose to sync to the cloud.

Purpose: To enable you to upload your files to the cloud so that you can manage and access such files.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you (only in relevant jurisdictions).

Retention period: Until you actively delete the files or delete your account, whichever is earlier.

(d) Sharing CamScanner

Data types involved: Recipient contact information.

Purpose: To share and recommend CamScanner products/services to friends.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you (only in relevant jurisdictions).

Retention period: Until you request deletion of the data or delete your account, whichever is earlier.

(e) Connecting a printer

Data types involved: The device Bluetooth permission you actively enable.

Purpose: To connect a printer.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you (only in relevant jurisdictions).

Retention period: Until you actively disable the Bluetooth permission or delete your account, whichever is earlier.

(f) AI Q&A and problem-solving

Data types involved: The content you input.

Purpose: To answer user questions and solve problems.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you (only in relevant jurisdictions).

Retention period: Until you request deletion of the data or delete your account, whichever is earlier.

(g) Problem analysis, traffic statistics, and account security

Data types involved: IP address, mobile carrier, time zone settings, device model, device system, network type, Android ID, advertising identifiers (such as IDFA for iOS, GAID for Android).

Purpose: For problem analysis, traffic statistics, identifying potential risks, and more accurately preventing fraud and safeguarding account security.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you and for our legitimate interests (only in relevant jurisdictions).

Retention period: Until you request deletion of the data or delete your account, whichever is earlier.

(h) Help and feedback

Data types involved: The content of your help requests and feedback, including text, images, and contact information.

Purpose: To help resolve your questions and issues.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you (only in relevant jurisdictions).

Retention period: Until you request deletion of the data or delete your account, whichever is earlier.

(i) Customer-service communication records

Data types involved: Communication/call records between you and customer service, account information, contact information, and other necessary information required for customer service to handle issues.

Purpose: For customer-service support, after-sales service, and dispute resolution.

Legal basis: Necessary to perform the CamScanner product/service contract entered into with you (only in relevant jurisdictions).

Retention period: Until you request deletion of the data or delete your account, whichever is earlier.

In particular, when you use the above features as an enterprise customer, all data generated through your use of these features constitutes Enterprise-Customer-Controlled Data, and we process such data solely on the entrustment of the enterprise organization you belong to. For an explanation of data ownership, please refer to “3. Enterprise-Customer-Controlled Data That Enterprise Customers Entrust Us to Process.”

3. Enterprise-Customer-Controlled Data That Enterprise Customers Entrust Us to Process

3.1 Ownership of control over data when a personal registered account joins an enterprise organization

If, as an end user, you register a CamScanner account using your personal mobile number, email, or another third-party account (such as Apple or Google) and join the enterprise you belong to, and use CamScanner as a member of the enterprise customer to scan files, collaborate internally, and centrally manage enterprise-level files, we will, in accordance with the configuration, operations, and instructions of the administrator of your enterprise, record the data you submit or generate in the course of using CamScanner features (hereinafter “Enterprise-Customer-Controlled Data”). Enterprise-Customer-Controlled Data may include:

3.2 Ownership of control over data when an individual uses an enterprise account

All data generated when you log in to and use the enterprise account assigned to you by your enterprise for work constitutes Enterprise-Customer-Controlled Data. You fully understand the work nature of the enterprise account and shall avoid using the enterprise account on your own initiative to upload, enter, publish, transmit, or share personal data; you may not, on the basis of such self-initiated actions, deny the enterprise customer’s ownership of control over the data of that enterprise account.

3.3 For Enterprise-Organization-Controlled Data, the enterprise-organization user is responsible for informing end users of the purpose, manner, and scope of the collection and use of personal data. If you have questions about the relevant content or wish to assert relevant personal-data rights, you acknowledge and understand that you should contact the enterprise-organization user or administrator. You understand and agree that we are the processor of Enterprise-Organization-Controlled Data and that we process Enterprise-Organization-Controlled Data solely on the entrusted instructions of the administrator.

Before collecting data, the enterprise customer shall ensure that it collects only the end-user data necessary to achieve enterprise operation and management purposes, has fully informed end users of the purpose, scope, and manner of the relevant data collection, and has obtained the end users’ authorization and consent.

End users understand and agree that the enterprise customer is entitled to process your personal data where necessary to enter into or perform a contract to which you are a party, or on the basis of legal and regulatory requirements, including entrusting us, within the purpose and scope of opening, managing, and using the CamScanner service under the administrator account to achieve file scanning, internal collaboration, and centralized management of enterprise-level files, to process the end users’ personal data on a reasonably necessary basis.

4. Security of Your Data

4.1 We attach great importance to the security of your data and have adopted standard industry practices to protect your data and prevent it from unauthorized access, disclosure, use, modification, damage, or loss. We have obtained ISO/IEC 27001, ISO/IEC 27701, and ISO/IEC 20000 certifications, ensuring that your data is protected to the highest standards. We employ administrative, technical, and physical security controls where appropriate, such as encryption, 2-step verification, and strict contractual confidentiality obligations for employees and contractors.

4.2 If any data incident occurs, we will notify you, pursuant to relevant legal and regulatory requirements, of the basic data about the security incident and its possible impact, measures that we has taken or will take, suggestions about active defense and risk mitigation, and remedial measures. The notification may take the form of an email, text message, push notification, etc. If it is difficult to notify data subjects one by one, we will take appropriate and effective measures to release a Security Notice. In addition, we will also report the handling status of data security incidents as required by supervisory authorities.

4.3 We pay high level to attention to your data security and specially have a commission of data security, which leads and coordinates relevant departments in processing data security and inspects the risk level of data security on a periodical basis; in the meanwhile, the head of the commission will be the Data Protection Officer whose duty includes guarantee of our company-wide performance in fulfilling the commitment of data security, etc. You can contact our Data Protection Officer via email at support@camscanner.com. You may visit Security & Protection knowledge-base document “Security Overview” to further understand our data security policy.

5. How We Store Your Personal Data

5.1 We will collect, store, and use your personal data in accordance with this Privacy Policy and applicable laws, wherever it is processed.

5.2 When you use Our Services on your devices, your data may be stored locally on the devices you use to access Our Services. When you sync your Devices with our Service, such data will be replicated on our servers maintained by us for processing and storage.

CamScanner is a global platform. Depending on the scope of your interaction with the CamScanner service, your personal data may be stored in multiple countries/regions. For example, if you are a user in the European Economic Area(“EEA”), your personal data is stored in Ireland; if you are a user in the United States, your personal data is stored in the United States. In addition, when we transfer personal data to other jurisdictions, we will ensure that the transfer of information complies with this Privacy Policy and applicable data protection laws.

5.3 We retain your data for no longer than is necessary for the purposes stated in this Privacy Policy. Once the retention period expires, we will delete or anonymize your data, unless otherwise required by applicable laws and regulations.

6. How We Share Your Personal Data

Unless otherwise provided below or unless you consent to our doing so, we will not transfer your personal data to third parties. We only share your data with selected recipients where reasonably necessary, and such recipients include:

(a) Sharing with our affiliates

We share your personal data within our corporate group in order to provide CamScanner to you and to help us achieve the purposes described in the “How we collect and use personal data?” section above.

(b) Sharing with third parties

Our services may contain third-party content and integrations (Third-party Services) to provide you with better service. We will only share your information in the following situations – and then only the minimum information necessary:

We share your information with service providers who process data on our behalf to perform services related to our Services. For example: Dropbox, Evernote, Google Drive, OneDrive/OneNote, Box, to sync the documents you upload as you need; Apple Pay and Google Pay to complete your payment transactions when you pay for the paid services provided by us. When you request a refund, you authorize us to share your in-app purchase information (including order details, transaction history, and account status) with Apple to help Apple evaluate your case. You may withdraw your authorization at any time.

We share your information with software development kit (SDK) providers to operate, develop, and improve the features and functionality of Our Services. For example: Firebase (analytics and reporting services provided by Google) to assist us in analyzing how Our Services are used.

We share Non-Identifying Information (including the advertising identifier currently associated with your device) and other aggregated information that does not include personal information with advertisement providers. If you prefer that we not deliver ads to you, please set the preference on your mobile device to limit ad tracking. Your mobile device includes a feature that lets you opt out of some types of targeted advertising (‘Limit Ad Tracking’ on iOS and ‘Opt Out of Interest-Based Ads’ on Android), you can opt out of Audience-Based and Activity-Based targeting by turning on the ‘Limit Ad Tracking’ setting on your iOS device or the ‘Opt Out of Ads Personalization’ setting on your Android device. To learn more about how these opt-out features work, please review your device settings.

(c) Business transfer.

As our business continues to develop, we may sell or acquire other businesses or services. In such transactions, personal data is generally one of the transferred business assets, but remains subject to the commitments made in any pre-existing privacy policy (unless you otherwise agree). In addition, in rare cases, if CamScanner or substantially all of its assets are acquired, your data will of course also be one of the transferred assets.

(d) Government, public-sector, regulatory, judicial, and law-enforcement bodies or authorities.

In certain circumstances, we are required by law to disclose your data, including (i) to comply with a legal obligation or requirement, such as a court order, subpoena, or other legal process; (ii) to enforce our terms; (iii) to handle matters relating to security or fraud; or (iv) in an emergency involving a risk of death, serious physical injury, or any risk of harm to children.

To protect the security of your data, we encourage you to review the privacy policies of every Third-party Service that you visit or use, including those third parties you interact with through our services. You can learn more about Third-party Services in CamScanner by clicking [List of Third Parties].

We will ensure that the lawfulness of this sharing and sign stringent non-disclosure agreements (NDAs) and/or data processing clauses with the companies, organizations, and individuals with whom the data is shared, requiring them to comply with this Privacy Policy and take appropriate confidentiality and security measures when processing the data.

7. What Are Your Rights And Choices

You can control and manage your data, you have the following rights and choices:

(a) Access, Correction, and Portability. You can access and edit most of your basic account data right in CamScanner. If you would like us to correct personal information that you cannot correct using your own account, please contact us. If we agree to correct your personal information, we will take reasonable steps to inform any third parties to whom we have disclosed the relevant personal data so that they can also correct it.

You have the right to receive a copy of certain of your data in a structured, commonly used and machine-readable format. If you need to do so, please contact us. You also have the right to request that we transfer this personal data to another party. If you would like us to transfer your personal data to a third party, please make sure you provide the details of that third party. Please note that we can only carry out such a transfer where it is technically feasible. Once the third party has received the personal data, we are no longer responsible for its security or its processing.

(b) Withdraw your consent. In most cases, if you let us use your data, you can simply revoke your permission by changing the settings in the app or on your device if your device offers those options. Of course, if you do that, certain services may lose full functionality.

Many CamScanner services include settings that let you control how your data is used. You can choose not to provide certain data, but then you may not be able to use certain CamScanner services.

(c) Deletion

If for some reason you ever want to delete your account, you can contact us.

You can also delete some information in the app, like photos you’ve uploaded to CamScanner.

You may request that we delete the data we hold about you where: (i) you believe that it is no longer necessary for us to hold your data; (ii) we obtained your consent to process the data and you withdraw that consent (and we have no other valid legal grounds for processing the data); (iii) you believe we are unlawfully processing your data; or (iv) you are or were under the age of 18 (or such applicable age of majority under relevant local laws) when we collected the data and we can verify this.

If we have sufficient legal grounds (for example, for the defense of legal claims, freedom of expression, or other legal obligations), we may retain personal data, but if that is the case, we will notify you.

If you have requested that we delete personal data that you made public and there is a lawful ground for deletion, we will take reasonable steps to inform any third parties to whom we have disclosed the relevant personal data so that they can also delete it.

(d) Restrict processing

If you want to restrict the processing of your personal data, please contact us. You have the right to restrict the processing of your data under the following circumstances: (i) your data is unlawfully processed, but you do not want to erase it; (ii) you have a legal claim that you need to establish, exercise, or defend, and you requested us to keep your data when we would not otherwise keep it; your request for objection is pending our verification process; or (iii) you have contested the accuracy of your personal data, and the accuracy of your data is pending our verification process.

(e) Right to object

If we use your personal data to pursue our legitimate interests (for example, where we use your personal data to ensure account security), you may object to our use of your personal data. If you object to this processing, please contact us.

To the extent permitted by applicable laws and regulations, you may withdraw any consent you previously provided to us in accordance with the instructions set out in this Privacy Policy.

Because your privacy is important to us, we will ask you to verify your identity or provide additional information before allowing you to manage your data. We may also reject your request to your data for a number of reasons, including, for example, if the request risks the privacy of other users or is unlawful.

8. How We Process Children's Data

The products under the CamScanner enterprise-account system are commercial products and, in principle, are not offered to minors (we consider a child to be an individual under the age of 18 or the equivalent age specified by the law of your jurisdiction). For the products under the CamScanner personal-account system, where a minor (we consider a child to be an individual under the age of 18 or the equivalent age specified by the law of your jurisdiction) creates an account or uses this Service, we will collect your personal data, but you must first obtain the consent of your parent/legal guardian. If you are a minor, you must first obtain the consent of your parent/legal guardian. Please contact our Data Protection Officer via email at support@camscanner.com if you believe we have any personal information from any Child without such parental/guardian consent and acknowledgment so that we can promptly investigate and remove such personal information.

9. How We Serve Advertisements

To help you receive more useful and relevant advertisements on other websites and services and to measure the effectiveness of advertising, CamScanner shares limited personal data with our advertising partners. We do not share your name or other data that can directly identify you. We use identifiers such as cookies or a unique code derived from your contact information (for example, a hashed email address). If you wish to adjust your personalized advertising preferences, please see the “What Are Your Rights And Choices” section above.

Our advertising partners include Google. If you would like to learn how Google processes your personal information, please refer to https://business.safety.google/privacy/.

10. Cookies and Tracking Technologies

Our websites and applications use small files called cookies, as well as similar technologies such as pixel tags and web beacons. Details of the cookies and related technologies we use and their purposes are as follows:

Our cookies enable you to use logged-in features, such as document management and format conversion. Disabling certain types of cookies may affect your experience on the website. Information automatically collected by cookies includes your IP address, device and browser information, and login credentials. Session cookies are automatically deleted when you close your browser; other cookies are retained for up to 365 days from last use.

11. Cross-border Data Transfers

To bring you Our Services, we operate globally and we will comply with the applicable data protection laws and regulations in your country/territory to collect, use and process your personal data. For example, if you are a user in the EEA your personal data is stored in Ireland; if you are a user in the United States, your personal data is stored in the United States. In connection with the purposes described herein, where necessary to provide our services, we may transfer your personal data to countries/territories outside your countries/territories, we will take appropriate safeguards to ensure that your personal information will remain protected in accordance with this Privacy Policy.

When transferring data from the EEA, the United Kingdom, or Switzerland to non-EEA countries, we rely on one or more of the following legal mechanisms: Standard Contractual Clauses, and the European Commission's adequacy decisionsabout certain countries, as applicable.

12. Change to This Privacy Policy

We may change this Privacy Policy from time to time. Under certain circumstances (for example with certain material changes or where it is required by applicable privacy laws) we will provide notice to you of these changes and, where required by applicable law, we will obtain your consent. If we change this Privacy Policy, we will change the “last updated” date at the top of this Privacy Policy and the revised policy will be posted to this page so that you can review it. Sometimes, we’ll let you know by revising the date at the top of the Privacy Policy that’s available in CamScanner. Other times, we may provide you with additional notice (such as providing you with an in-app notification).

13. How to Contact Us

If you have any questions or complaints regarding this Privacy Policy or the use of your data, please contact our Data Protection Officer via email at support@camscanner.com.

14. Additional Notice for California Residents (How We Comply with CCPA)

The California Consumer Privacy Act (CCPA) enhances privacy rights and consumer protection for individuals who reside in California. We are committed to full CCPA compliance.

What are your rights under the CCPA?

If you are a resident of California, the CCPA grants you the following rights:

You are entitled to make two information requests within a 12-month period. If you make an information request, we will need to collect certain information from you in order to verify your identity. You will receive a response to your request within 45 days.

Opt-Out Options

If you don’t want us to collect and/or process your information any more please contact us at support@camscanner.com. Note that if you decide to opt out of data collection and processing this can affect some functions and you may not be able to use all features of Our Services to the fullest extent possible.

How can You submit a personal information request?

You can submit a personal information request via email at support@camscanner.com.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information. For all requests, we will need to collect certain information from you in order to verify your identity.

15. Additional Notice for EU/EEA Residents (How We Comply with GDPR)

The General Data Protection Regulation (GDPR) regulates the processing of personal data about individuals in the European Union. We are committed to full GDPR compliance.

What are your rights under the GDPR?

You have many rights relating to your personal information. Additional information on your rights can be requested directly from the data protection regulator within your country. Your rights include:

If you make a request regarding your rights, we have one month to respond to you. If you would like to exercise any of the above rights, you can contact us via email at support@camscanner.com.

What information do we retain after account closure?

After your account is closed, we may need to retain certain information for a period of time for legal and legitimate business purposes. For example, we may retain your personal data for tax and accounting purposes, such as your contact details (for example, your email address) and any invoices CamScanner has sent you (for example, purchase records). Where necessary, CamScanner may also retain records of our communications with you and related logs (for example, your account-closure log) for dispute resolution. In addition, we may retain records to prevent fraud and ensure security, for example in the event of abuse of our Services or violation of our terms.

How do we comply with data transfer rules?

When transferring data from the EEA, the United Kingdom, or Switzerland to non-EEA countries, we rely on one or more of the following legal mechanisms: Standard Contractual Clauses, and the European Commission's adequacy decisions about certain countries, as applicable.

How to contact us?

If you have any questions about this privacy policy or if you would like to exercise any of your rights, you may contact our Data Protection Officer via email at support@camscanner.com.

16. Additional Notice for Brazilian Residents (How We Comply with LGPD)

The Brazilian Privacy statute, Lei Geral de Proteção de Dados (LGPD), enhances privacy rights and consumer protection for individuals who reside in Brazil. We are committed to full LGPD compliance.

Your Brazilian privacy rights

You have the right to: 

You will never be discriminated against, or otherwise suffer any sort of detriment, if you exercise your rights.

How to file your request

You can file your express request to exercise your rights free from any charge, at any time, by using the contact details provided in this Privacy Policy, or via your legal representative.

Transfer of personal information outside of Brazil permitted by the law

We are allowed to transfer your personal information outside of the Brazilian territory in the following cases:

Click to view previous versions