Security & File Handling

1.What happens when you use a tool

1. 1

   You open a tool page

   Your browser downloads the page and the processing code, the same way it downloads any web page.

2. 2

   You choose a file

   The browser reads it from your device into memory. It does not send it to pdfdoco.com.

3. 3

   The tool runs in your browser

   Merging, splitting, compressing, converting, encrypting, rotating, cropping, numbering: all of it is computed by the code running on your computer or phone.

4. 4

   You download the result

   The browser writes the new file to your device. Nothing was sent anywhere in between.

5. 5

   You close the tab

   The file is gone from memory. We have no copy, because we never had one.

2.Where each tool processes your file

Every tool accepts files up to 50 MB on the free plan. The limit is enforced in your browser; a file that is too large is refused before anything happens to it.

3.The exceptions, stated plainly

• AI writing helper (PDF editor only, optional). Improve, fix grammar, shorten, translate, summarize and chat-with-document send the text you select (or, for summarize and chat, the document's text and your question) through our server to our AI provider, Anthropic. The PDF file itself is never sent. We don't store the text or the response. If you never click an AI button, nothing from your document is sent anywhere.
• Import from Google Drive, Dropbox, OneDrive or a URL. These buttons appear on tool pages but are not switched on yet; pressing one shows a "coming soon" message and sends nothing. When they launch, the file will be delivered to your browser and processed there, like a file from your device, and this page will say so.
• HTML to PDF from a web address. Your browser fetches the address directly and renders it on your device. There is no server in between, which is also why it only works for sites that allow cross-origin reads; the tool explains the alternatives when a site doesn't.

4.What stays on your device

To make the tools convenient, your browser may keep a few things locally, in its own storage, which we cannot read:

• An unfinished PDF editor session, so your work survives a refresh
• Signatures you choose to save
• A file handed from one tool to the next, deleted after 15 minutes
• Your cookie choices and your guest task count

Clearing site data for pdfdoco.com in your browser removes all of it.

5.Check it yourself

You don't have to trust this page. Open any tool in Chrome, Edge, Firefox or Safari, press F12 (or Cmd+Option+I on a Mac) to open developer tools, and select the Network tab. Process a file. You'll see the page's own scripts, fonts and analytics requests. You won't see your file, its name, or its contents in any request to pdfdoco.com.

6.What we do collect

Running a website means some data exists. Our Privacy Policy lists every item: your email and a hashed password if you make an account, your plan and daily task count, order details from Paddle if you buy a plan, the text you choose to send to AI features, standard request logs at our host, and analytics and advertising cookies according to your consent choices.

We don't collect file names, file contents or anything inside your documents, and we don't ask for sensitive personal data.

7.Encryption and infrastructure

• All traffic between you and pdfdoco.com uses HTTPS (TLS).
• The Protect PDF tool encrypts with AES-256 inside your browser; the password you type never leaves it.
• Accounts are hosted on Supabase with passwords stored as secure hashes; the site runs on Vercel; payments are handled by Paddle, so we never see card numbers.
• We hold no security certifications such as ISO 27001 or SOC 2. We're a small company, and we'd rather tell you what we actually do than hang a badge on the page. The design choice that matters most, not touching your files at all, needs no certificate to verify.

8.What we can't do

Because your files never reach us, we can't recover a file you didn't download, undo a change after you've closed the tab, or retrieve a password you set with Protect PDF. Keep your original until you're happy with the result.

9.Reporting a security issue

If you find a vulnerability, email support@pdfdoco.com with "Security" in the subject. Tell us what you found and how to reproduce it; we'll acknowledge within two business days and keep you updated until it's fixed. Please don't test against other users' data or accounts.

10.Changes to this page

When a tool's processing changes, this page changes with it, and the "Last updated" date at the top moves. Significant changes are also noted on the tool's own page.