Temporary processing

Tools marked on-device — merging, splitting, organizing, rotating, extracting and deleting pages, images to PDF and PDF to images — runs entirely in your browser. Those files are never transferred to us.

Hosted conversions and AI tasks use temporary processing; on-device OCR remains local unless you choose hosted AI re-reading. For those, your file is transferred over an encrypted connection to temporary processing storage, processed, and returned to you.

You are always told before this happens, and you can decline. Nothing is transferred without your explicit confirmation. The current temporary processing size limit is 25 MB.

Do not submit documents containing health information, payment-card data, financial account numbers, government identification numbers or biometric data for hosted processing or AI under our current service arrangement. Consent, encryption, temporary storage and automatic deletion do not make these categories permissible.

We do not keep a document library. There is no "My Documents" area, no permanent uploads, no permanent generated outputs, and no permanent thumbnails. We process documents; we do not become your document repository.

After non-AI delivery, or Finish & delete or review expiry for AI jobs, the platform explicitly deletes the input, any intermediate artifacts and the temporary output, then verifies with the storage provider that the objects are gone. Only after that verification does your receipt say deletion is confirmed. If verification has not completed yet, the receipt says deletion is being completed — we do not report deletion before it is real.

If you close the tab, lose connection or never collect a result, an automated cleanup removes the temporary objects. The application aims to remove abandoned objects within one hour. A storage-provider expiry rule acts only as a secondary safety net, not as the primary deletion mechanism.

We keep processing metadata without document content: job identifier, account, processing mode, status, sizes, timing, deletion state and failure category. These activity records exclude document content. Temporary document artifacts follow the deletion workflow above. AI app context was confirmed off by the founder; this prevents new full request/response capture in project AI logs, not operational summaries. Historical-log deletion is unconfirmed, and zero model-provider retention is not guaranteed.

Transfers use TLS, and temporary objects are encrypted at rest by the storage provider. This is standard transport and server-side encryption. It is not end-to-end encryption and it is not zero-knowledge: during processing, the processing system can read the file in order to do the work you asked for.

Controlled, organization-specific processing environments are a planned enterprise capability. They do not exist today and are not offered.