Privacy

What IndicPDF collects, why, which outside services handle a document, and how to have something removed. Updated 16 October 2026.

For what happens to a file from upload to deletion, see Security and your files.

Your files

A file you upload is used to do what you asked, and nothing else. It and everything made from it are deleted from our servers within 4 hours of upload. How, and what we keep longer, is on the Security page.
We do not read your files for any other purpose, and we do not use them to train anything.

An account, if you make one: your e-mail address, and a password stored only as a one-way hash, or your Google sign-in. We use it to sign you in, to confirm your address and to apply your daily limits.
A record of each job: the tool, the language, the number of pages, how long it took and whether it worked. It holds no file name and no text of your document.
What you choose to give us: feedback you write, an e-mail address you leave to hear when something launches, and messages you send through the contact form.
Visit counts from Google Analytics: which pages and tools are used, with the language and the number of pages. File names and contents are never sent to it.

Two features use Google Cloud: reading the text of a scanned page (Google Cloud Vision) and translating a document (Google Cloud Translation). They are used only for a signed-in account whose e-mail address is confirmed and which has accepted the notice shown before the first upload.
For those two features alone, the page image or the text is sent to Google Cloud, processed and sent back. Your file’s name, your name and your e-mail address are never sent, and nothing else you do on IndicPDF is.
Under Google’s published terms for these services, Google does not use what we send to train or improve its models, uses it only to provide the service, and does not share it with third parties. It holds the content in memory while it is processed and logs the time and size of each request to run the service and prevent abuse.
Google processes it on its own servers, which may be in other countries, including outside India.
A translation is produced by a machine. Please review it before official use.
We use our database provider (Supabase) for accounts and job records, and our hosting provider (Render) to run the service.

Files: no more than 4 hours after upload.
Job records, feedback and the addresses people leave: nothing deletes these automatically yet. You can ask us to remove yours (see below).
An account stays until you delete it.
A nightly encrypted copy of the accounts and job-records database is sent to our own mailbox so that it can be restored if the database is lost. It holds no files.

You can delete your account yourself from the Account page. That removes the account, its sign-in codes and reset links, and the launch-notification address you gave with it, and ends every session.
To have anything else removed, or to ask what we hold about you, write to contact@indicpdf.in.
Scanned pages are sent to Google only after you accept the notice. Without an account, or before you accept, they are read by our own reader on our own server.