Privacy Policy

PDF processing and temporary files

Unlock processing runs only after your account has unlock access. Until then, the PDF stays on your device. After access is granted, the file is uploaded over HTTPS to private Vercel Blob storage in the region of our Vercel project, inspected and unlocked with qpdf on our servers, then made available for download through an authenticated link.

We do not read document contents except as needed to decrypt the file you asked us to unlock. Passwords are used in memory for that request only and are not stored.

Retention: the original upload is deleted when unlocking finishes, fails, or is cancelled. The unlocked copy is deleted immediately after you download it, or within 1 hour if it is not downloaded. Incomplete recoveries expire after 24 hours and their files are deleted. A storage lifecycle rule deletes leftover objects within about 24 hours if an automated sweep is missed. We keep only filename, size, tool, timestamps, and authorization confirmation in your account history — not the PDF itself.

Sub-processors for this flow: Vercel (hosting, functions, and Blob storage) and Clerk (accounts). We do not sell your documents or use them to train models.

Information We Collect

Information You Provide • Email address (for newsletter subscription) • PDF files you upload for processing • Feedback or contact information you share with us Automatically Collected Information • Email address (for newsletter subscription) • PDF files you upload for processing • Feedback or contact information you share with us

How We Use Your Information

Primary Uses • To provide and maintain our PDF processing services • To protect our services and users from fraud and abuse • To improve and optimize our website and services Secondary Uses • To send you newsletters if you’ve subscribed • To analyze usage patterns and improve user experience • To notify you about changes to our services Important: We do not sell your personal data to third parties under any circumstances.

Your Rights and Choices

Access You have the right to request access to the personal data we hold about you. Rectification You can request corrections to your personal data if it's inaccurate or incomplete. Erasure You can request deletion of your personal data under certain circumstances. Restriction You can request restriction of processing of your personal data. Data Portability You can request transfer of your personal data to another service. Objection You can object to processing of your personal data for certain purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. Our Security Measures Include: • Encryption of data in transit using SSL/TLS protocols • Secure servers with regular security updates • Access controls and authentication procedures • Regular deletion of processed files

International Transfers

Your information may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. However, we have taken appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy. These include implementing the European Commission’s Standard Contractual Clauses for transfers of personal data between our group companies and third-party providers.