Skip to main content
đź”’ Privacy-First Architecture

Privacy Policy

Last Updated: August 2026

1. Core Privacy Principle: Zero Document Uploads for Local Tools

PDFZento is engineered from the ground up to protect your document privacy. Standard PDF operations—including merge, split, compress, edit, rotate, organize, annotate, flatten, and format conversion—execute 100% locally inside your web browser using WebAssembly and Web Workers.

For these local operations, your files are loaded into your device's memory only. Zero document bytes or extracted text ever touch our servers or third-party networks.

2. Distinction Between Local Tools & Server-Assisted Features

Local PDF Operations (Default)

  • Executed entirely in browser WebAssembly memory.
  • Files are destroyed from RAM upon tab close or reset.
  • No logging, no telemetry, no document caching.

Server-Assisted Capabilities (Optional / Authenticated)

  • Applied only when explicitly requested (e.g. AI document chat, authenticated account management).
  • Processed in secure, ephemeral microservice sandboxes with automated 1-hour TTL deletion.
  • Encrypted in transit (TLS 1.3) with strict per-user cryptographic isolation.

3. Information We Collect

We believe in minimal data collection:

  • Anonymous Device Abuse Signal: An opaque 128-bit anonymous device token (hashed with HMAC-SHA256) is used solely to prevent abuse of free daily operation quotas. We do not use invasive fingerprinting (no canvas, WebGL, font, or audio scraping).
  • Account Data (Registered Users Only): If you create an account, we store your email address and cryptographic password hash. We never sell or share account information.
  • Aggregated Telemetry: Anonymized performance metrics (e.g., operation duration, error codes) without document contents, filenames, or user identifiers.

4. Data Retention & Erasure

Because local PDF files never leave your device, there is nothing for us to delete. For server-assisted sessions, all temporary storage artifacts in Cloudflare R2 are automatically destroyed after 60 minutes. Account holders may delete their account and associated metadata at any time from their account dashboard.

5. Contact Information

For any privacy inquiries or data rights requests, contact our privacy team at privacy@pdfzento.com or visit our Contact Page.