Understand privacy, processing, and mascot settings

Follow the steps

1. 1

   Review board access before sharing. Invite only the people who need viewer or editor access, or disable a public link when it is no longer needed.

2. 2

   Use local palette extraction and local document extraction by default. Open the scanned-PDF options only when you want to consider a hosted provider.

3. 3

   If you allow hosted PDF processing, select the provider for that document and read the disclosure that the entire PDF will be sent to it.

4. 4

   Open Settings → Notifications to turn automatic smart tags on or off. The default is on for new captures; turning it off cancels queued work and does not scan or modify existing items.

5. 5

   Open Settings → Appearance to choose light, dark, or system theme and to show or hide Cora. Open Settings → Privacy to download account data or begin account deletion.

What to know

• Cora is a visual mascot who never reads, changes, or speaks for your content. Her visibility and motion behavior are separate from content permissions.
• Hosted OCR is explicit per document and provider-disclosed. The application rejects hosted textual output containing Han characters before persistence; that rule is a conservative output guard, not a guarantee of language detection.
• Account export contains records and metadata. Account deletion can wait with a conflict while processing, an active subscription, or an open checkout prevents safe cleanup.
• For smart tagging, Canvas Perch requests Mistral Large 4 first through OpenRouter Zero Data Retention routing. After primary HTTP 429, HTTP 5xx, or network timeout, one fallback request may use Microsoft Azure-hosted GPT-6 Luna. If both fail transiently, newly queued eligible capture or Tag again jobs may receive up to four recovery rounds, each at least six hours after the previous transient failure. Each round requests Luna first; only a transient Luna failure may lead to Google Vertex-hosted Claude Haiku 5.5. Every route requires Zero Data Retention and denies provider data collection. Turning tagging off, editing or deleting the item, or losing access cancels pending recovery. Tag again supersedes pending recovery. Existing items are not backfilled. Saved items, tags, job state and provenance remain in Canvas Perch; a daily cleanup removes sanitized provider-attempt failure logs after 30 days; those logs contain no item content, prompts, raw provider responses or keys.
• Successful smart-tag results are added automatically to eligible new captures. The item reader identifies the provider route and lets you add or remove tags immediately, run Tag again, or explicitly tag an older item.

Troubleshooting

• If a hosted provider is not shown as configured, keep the document local or ask the installation operator to configure that provider.
• If another person can open a board unexpectedly, disable the public link and review the member list. Creating a new public link also invalidates the old link.
• If account deletion returns a processing or billing conflict, finish or cancel the blocking state and retry after the server reports that the account can be cleaned up.