Security and your files

What happens to a file you upload, from the moment it leaves your computer to the moment it is deleted. Each point is what the service does today.

Where your file goes

Your file travels to us over HTTPS, and the site tells browsers to use nothing else (HSTS).
It is converted on our own server, which is hosted by Render in Oregon, USA. We do not send it to another company’s OCR, AI or translation service.
Converting an image to another image format happens in your browser, and that image is not uploaded at all. Making an image into a PDF happens on our server.

An uploaded file and the result made from it are stored encrypted, with AES-256-GCM.
A file is decrypted only while it is being converted, into a working folder on the server that the same clean-up empties.
When we update the server, files still waiting to be converted are handed to the new server through our database, still encrypted, and removed from it once they are taken, or within the same hours as every other file.

A clean-up runs every 15 minutes and deletes uploads, results and working copies, so nothing is kept more than 4 hours after you upload it. A file made later from the same upload, such as a retry, counts from the upload too.
A server restart deletes files sooner.
Your download link carries a random ID. Anyone who has the link can download the result until the file is deleted, up to 4 hours after upload, so share it only with people who should see the file. The link does not expire before then.

Our job queue keeps your file’s name with the job for 4 hours after the job ends, so the result page can show it.
After that, a note that a job ended, with the tool, the outcome and the time but no name and no content, is kept for 7 days, so an old link can say the file was deleted.
Our database keeps a record of each job: the tool, the language, the number of pages, how long it took and whether it worked. It holds no file name and no text.
It also keeps what you choose to give us: feedback you write, an email address you leave to hear when something launches, and your account if you sign up. Nothing deletes these automatically yet.
If a conversion goes wrong and you tick the box to let us keep the file, it is kept encrypted for 7 days so we can fix the problem, then deleted. Nothing is kept unless you tick it.
An email address you give for a job’s result is used for that one job and deleted when the email is sent.

We do not use your files to train anything.
There are no ads on the site.
Google Analytics counts visits and which tools are used, with the language and the number of pages. File names and contents are never sent to it.
Our server logs record the tool, the page count and how long a job took, not your file’s name or its text.