Privacy policy
Local processing by default
Tools marked “Processed on your device” run entirely in your browser or app. Your files are not uploaded; they never leave your device. The page shows how many bytes were uploaded in the current session.
Server processing
Some tools (Office conversions, HTML to PDF, very large OCR, AI) need our servers. Before the first upload we ask for your consent. Files are transferred with TLS, stored encrypted (AES-256-GCM) in the EU, and deleted after one hour or right after download if you choose so. Deletion is automatic and logged.
AI features
AI tools send the extracted text of your document to our AI provider under a data-processing agreement that forbids training on your data. Without a connection, AI tools fall back to on-device methods.
Accounts
If you create an account we store your e-mail address, plan, usage counters, saved workflows (when you choose cloud sync) and signature-request audit trails. You can delete your account at any time in Account settings; all data is erased.
Analytics
Optional and off by default. If you allow it we record tool name, outcome, duration, file count and total size — never file names or content. No third-party trackers, no advertising.
Storage on your device
We store settings, saved signatures, workflows and your open workspace in your browser (IndexedDB) so you can continue offline. Clear it any time from your browser settings.
Your rights (GDPR)
You have the right to access, rectification, erasure, restriction, portability and objection, and to complain to a supervisory authority. Contact: privacy@leaflypdf.com