Security and Privacy Framework
Last Updated: July 24, 2026
When you use TextToPDF to convert or extract document content, you need exact answers about where your files go, how long they exist, and who has access to them. We do not rely on vague terms like "files are deleted shortly." This page provides exact technical answers to how your files and data are processed.
Quick Summary of File Handling Rules
| Security Question | Exact Answer & Technical Detail |
|---|---|
| Where is Text to PDF processed? | In-Browser Memory: Processed 100% locally in your web browser. Text content never leaves your device. |
| Where is PDF to Text processed? | Local / Isolated Server: Text-layer extraction runs in-browser or on our isolated conversion server. |
| Where does OCR happen? | Isolated Worker Server: Runs on our Linux worker servers (PyMuPDF & Tesseract) or in-browser Web Workers. No third-party AI APIs process your files. |
| How long are files retained? | 15 Minutes Maximum: Ephemeral server temporary files auto-delete after 15 minutes. Browser-processed tools retain files for 0 minutes. |
| Are files stored permanently? | No: Permanent storage of uploaded document files is strictly prohibited by system architecture. |
| Are files used for AI training? | No: Uploaded files and converted text are never used to train AI models or machine learning algorithms. |
| Are file contents logged? | No: Document text and file payloads are never logged or inspected. Only anonymized technical HTTP status codes are recorded. |
| What happens to conversion history? | Transient browser state for guests. Account dashboards record metadata only; server files purge within 15 minutes regardless. |
| Which third parties process files? | None for document content. Cloudflare (CDN) and AWS (ephemeral hosting) handle infrastructure with 15-minute auto-purge lifecycle rules. |
| How to request manual deletion? | Server files purge automatically after 15 minutes. For immediate manual purge, email support@texttopdf.net. |
Detailed Tool-by-Tool Processing Routes
1. Text to PDF, Rich Text to PDF, and Markdown to PDF
- Processing Location: 100% inside your local browser memory.
- Data Transmission: Text typed or pasted into the editor is rendered into PDF pages using client-side JavaScript and Web Workers. The content is never sent across the internet to our backend servers.
- Retention Period: 0 minutes (never leaves client memory).
2. PDF to Text (Searchable PDFs)
- Processing Location: In-browser text parser or isolated backend server engine for large documents.
- Data Transmission: Searchable PDF files are read to extract embedded vector font layers.
- Retention Period: Files uploaded for backend processing are stored in temporary storage and automatically deleted within 15 minutes.
3. Scanned PDF & Image to Text (OCR)
- Processing Location: Isolated Linux worker servers (
ocr-workerrunning PyMuPDF and Tesseract OCR) or in-browser Tesseract Web Workers. - Data Transmission: Scanned PDF pages are converted into temporary image frames for optical character recognition. No third-party AI processors, external cloud vision APIs, or data brokers are involved.
- Retention Period: Temporary page images are purged immediately upon conversion completion, with a hard automated deletion limit of 15 minutes.
AI Training Policy
We hold a firm policy regarding AI model training: Your document content is yours alone.
- We do not use uploaded files to train AI, LLMs, or OCR recognition models.
- We do not sell, license, or share user text with third-party AI companies.
- We do not aggregate document text for data analytics.
Logging, Metadata, and Infrastructure
What We Log
- Anonymized technical metrics (HTTP response codes, request duration, error rates, and IP-based rate limiting counters) to prevent DDoS attacks and ensure system stability.
What We NEVER Log
- Document text, pasted content, file names, converted PDF bytes, or OCR extraction results.
Third-Party Infrastructure Providers
- Cloudflare: Provides SSL encryption, DDoS mitigation, and global CDN caching for web assets. Cloudflare does not inspect or store document payloads.
- Amazon Web Services (AWS): Provides ephemeral server hosting for backend OCR processing. Temporary storage buckets enforce automated 15-minute lifecycle deletion policies.
Manual Deletion Requests & Contact
All temporary files on TextToPDF servers are automatically destroyed within 15 minutes. If you wish to confirm an immediate manual deletion of any temporary session logs, contact our technical team:
- Email: support@texttopdf.net
- Response Time: All privacy and data deletion enquiries are acknowledged and processed within 48 hours.