Pricing

Free on your device. Fair when AI helps.

Deterministic conversions are free and unlimited on every plan — they run in your browser and prepare no AI request. Paid plans add higher-volume AI-assisted, layout-aware conversions, billed at the model's price plus our markup, through the gateway.

Free

$0 forever

Every deterministic conversion, unlimited, on your device.

  • Unlimited on-device conversions (PDF · Word · Markdown · HTML · CSV · JSON · Excel)
  • On-device scan for emails, phones, DOBs, cards, IBANs, IDs, IPs, places and known names + request body receipt on every job
  • Up to about 5 AI-assisted conversions per day (fair-use allowance; layout-aware / summarise)
  • Deterministic jobs run in your browser tab
Open the airlock

Business

$19 per seat / month

For teams whose contracts and records should stay in the browser.

  • Everything in Personal
  • Higher AI-assisted volume (2,000 / mo) + premium models — planned
  • Per-seat billing + shared surrogate policy — planned
  • Request body receipts for audit (on-device, not signed)

Questions

What counts as a conversion?

Every deterministic conversion — PDF/Word/Markdown/HTML/CSV/JSON/Excel round-trips — is free and unlimited on every plan, because it runs entirely on your device and costs us nothing. Only AI-assisted conversions (layout-aware structuring and summarising) meter against your plan, because they relay cloaked surrogates through the gateway.

Why is there a charge at all if it runs on my device?

The deterministic conversions are genuinely free forever. The paid tiers raise the AI-assisted allowance above the free daily one: those call a language model through the CloakAPI gateway, and we bill a small markup on the model's usage — never a free relay, never a hidden upsell.

Do you ever see my files?

Deterministic conversions run in your browser tab and prepare no AI request. An AI-assisted conversion prepares a cloaked copy of the document text: detected values were replaced before sending (emails, phones, dates of birth, cards, IBANs, passports, national and company IDs, IP addresses, postcodes, places and person names — including uncommon and non-Latin-script names the on-device model finds). Those real values — plus the map that restores them — stay on your device. Text the engine does not flag is relayed as written, so read the Request body receipt for scan results and the UTF-8 byte length of the JSON body this browser posted to the same-origin relay. That count excludes HTTP headers and transport bytes and does not measure bytes received by the gateway. You can still send while the name model is missing. Quick check replaces values it recognises; some names may be sent as written. See /privacy for what detection covers and what it misses.

Can I cancel anytime?

Yes. Plans are month-to-month. Manage or cancel from your CloakAPI account at any time; deterministic conversions keep working regardless.