Our commitment

File security

A plain account of what happens to your documents.

In short

  • Auto-deleted after 24 hoursOn the free tier; press “Delete now” to remove a file sooner.
  • Encrypted, alwaysIn transit and at rest; download links expire after 10 minutes.
  • No staff accessThere is no feature that lets staff open or download your files.
  • Never used for AIFiles are never used to train AI or sent by email.

How long files are kept#

Every input and output file is deleted automatically after processing finishes: 24 hours on the free tier, 3 days when you use credits and 7 days with Pro, signed in or not. You can keep a file 30 days for 2 credits, or press “Delete now” at any time; the file is removed from the server within a minute. History entries (without files) are kept for up to 30 days.

Where files live and who can see them#

  • Files are encrypted in transit and at rest.
  • The system has no feature that lets staff open or download your files; every infrastructure access is logged.
  • Files are never used to train AI, and their content is not analysed beyond what you ask for.
  • Only you can download files from your results page, unless you create a share link yourself (up to 24 hours or until the file is deleted, and you can revoke it). Files are never sent by email (we email only account messages such as receipts and security alerts).
  • File names are random. Direct download links are short-lived (10 minutes) and can be reissued; a share link you create can be revoked at any time.

Digitally signed files#

Digitally signed PDFs are not compressed or edited, to keep the signature valid, unless you choose to create a copy without the signature, clearly labelled on every page. Your original is never changed. Read why.

Abuse prevention#

To keep the free tier fair, we count runs per browser, account and network, and sometimes ask for an automatic verification step. We don’t use cross-site tracking.

Browser technical signature#

We compute a technical signature of your browser (from settings such as language, time zone, screen and graphics configuration) only to count free runs and prevent abuse. This signature can never open a wallet or its credits; reopening a wallet requires a recovery code or Google sign-in. It is deleted after 30 days of inactivity. It is treated as personal data and handled according to our privacy policy.

Contact#

Questions about your data: support page. See also our privacy policy and terms.

Still have questions?

Send us a message and we reply by email.