Privacy Policy

Tools such as Merge, Split, Compress, Edit, Sign (for yourself), Redact, Compare, OCR, Protect and most conversions run in your browser. Your files are not sent to our servers and we cannot see them.

Some tools need a server: Word, PowerPoint and Excel to PDF, HTML to PDF, Markdown to PDF, signature requests, and the phone relay in Scan to PDF.

• Conversions: the file is processed in memory or in a temporary folder and deleted as soon as the result is sent back.
• Scan to PDF: photos taken with your phone are held in memory for at most 30 minutes and deleted the moment your computer receives them.
• Signature requests: the PDF, the signers’ names and email addresses, their signatures and an audit trail are stored until the request expires (30 days) or you delete it.

AI tools (summaries, chat, translation, rewriting) send the text of your document — not the file itself, except for scanned pages without text — to our AI provider, Google (Gemini API), to produce the result. We don’t store it.

If you create an account we store your email address, name, a salted hash of your password (never the password itself), and daily usage counters.

If you continue with Google, Google tells us your email address, name and an account id that stays the same. We never see your Google password or anything else in your Google account.

You can change your details or delete your account at any time from the account page. Deleting it removes your account, your signature requests and their files.

We use one essential cookie to keep you logged in. We don’t use advertising cookies or sell personal data. Your theme preference is stored in your browser.

To enforce fair-use limits for visitors without an account, we count requests per network address. The address is stored only as a one-way hash, per day.

We keep our own, cookie-free usage statistics: which pages are viewed, which tools are used, whether they succeeded and how long they took, and the website you came from. File names, file contents and IP addresses are never part of them. A visitor is counted with a hash of the network address and browser that changes every day, so nobody can be followed across days. Raw statistics are deleted after about 13 months.

When you write to us through the contact page we store your email address, name (if given) and the conversation, so we can answer and you can follow up. Conversations are deleted on request, or with your account if they belong to it.

Ratings you leave after using a tool (stars and an optional comment) are stored with the tool name and, if you are logged in, your account.

When you delete your account you may tell us why. That optional answer is kept with your email address and plan so we can learn what to improve; ask us and we delete it.

We send emails only when you ask for them: password resets, replies to your support messages, signature requests you send, and receipts for paid plans.

You can ask for a copy of your data, its correction or its deletion. Under the GDPR and similar laws you may also object to processing or complain to your data protection authority.