Pricing

Free on your device. Fair when AI helps.

Deterministic conversions are free and unlimited on every plan — they run in your browser and egress nothing. Paid plans add higher-volume AI-assisted, layout-aware conversions, billed markup-only through the gateway. Save 2 months on annual billing.

Free

$0 forever

Every deterministic conversion, unlimited, on your device.

  • Unlimited on-device conversions (PDF · Word · Markdown · HTML · CSV · JSON · Excel)
  • On-device scan for emails, phones, DOBs, cards, IBANs, IDs, IPs, places and known names + egress receipt on every job
  • 5 AI-assisted conversions per day (layout-aware / summarise)
  • Nothing leaves the tab on deterministic jobs — 0 bytes egress
Open the airlock

Business

$19 per seat / month

For teams whose contracts and records should stay in the browser.

  • Everything in Personal
  • Higher AI-assisted volume (2,000 / mo) + premium models
  • Per-seat billing + shared surrogate policy
  • Countersigned egress receipts for audit

Questions

What counts as a conversion?

Every deterministic conversion — PDF/Word/Markdown/HTML/CSV/JSON/Excel round-trips — is free and unlimited on every plan, because it runs entirely on your device and costs us nothing. Only AI-assisted conversions (layout-aware structuring and summarising) meter against your plan, because they relay cloaked surrogates through the gateway.

Why is there a charge at all if it runs on my device?

The deterministic conversions are genuinely free forever. The paid tiers cover AI-assisted conversions: those call a language model through the CloakAPI gateway, and we bill a small markup on the model's usage — never a free relay, never a hidden upsell.

Do you ever see my files?

Deterministic conversions never leave the browser — we cannot see them at all. An AI-assisted conversion relays a cloaked copy of the document text: every value the engine detects (emails, phones, dates of birth, cards, IBANs, passports, national and company IDs, IP addresses, postcodes, places and person names — including uncommon and non-Latin-script names the on-device model finds) is replaced by a surrogate first, and those real values — plus the map that restores them — stay on your device. Text the engine does not flag is relayed as written, so read the receipt: it shows exactly what happened. If the name model cannot load, nothing is sent. See /privacy for what detection covers and what it misses.

Can I cancel anytime?

Yes. Plans are month-to-month (annual saves two months). Manage or cancel from your CloakAPI account at any time; deterministic conversions keep working regardless.