Privacy
Last updated October 2026
This page explains, in plain language, what happens to the documents you work on with PDFella. We only make claims here that our software actually enforces.
Files processed in your browser
These tools run entirely on your device. Your file is read into your browser's memory and is never sent to our servers:
Edit PDF · Add Text · Whiteout · Highlight · Draw · Annotate · Add Images · Add Shapes · Sign PDF · Merge PDF · Split PDF · Rotate PDF · Rearrange Pages · Delete Pages · Extract Pages · PDF to Word · PDF to JPG · PDF to PNG · PDF to Text · JPG to PDF · PNG to PDF · Compress PDF · Repair PDF · Flatten PDF · Protect PDF · Unlock PDF · Redact PDF · Watermark · Page Numbers · Header & Footer · Fill PDF · Create PDF Form
While you edit, the editor keeps an automatic recovery copy in your browser's local storage (IndexedDB) so you can restore your work after an accidental refresh. It never leaves your device, expires after 7 days, and is removed when you choose Discard or start a new document.
Files processed in the cloud
These tools need server software (such as OCR or Office conversion) and therefore upload your file:
PDF to Excel · PDF to PowerPoint · Word to PDF · Excel to PDF · PowerPoint to PDF · OCR PDF
- Files are uploaded over HTTPS directly to a private storage bucket using a short-lived, single-use signed link. The bucket is never publicly readable.
- Each job is processed in an isolated container without general internet access.
- Input and output files are deleted as soon as you download the result. If you don't, a scheduled cleanup deletes them after 60 minutes, and a storage lifecycle rule permanently removes anything older than 24 hours as a backstop.
- Job records contain only technical metadata (tool, file size, status, timestamps), never file names or contents, and they expire automatically.
What we never do
- We do not use your documents to train AI models.
- We do not read, analyse, index or sell document contents.
- We do not log document text, file names, signatures or form values.
- We do not require an account to use any tool.
Signatures
Signatures you create are kept only in the memory of the current browser tab and are discarded when you close it. We never upload or store them.
Analytics
If enabled, we record anonymous usage events such as “a merge was completed” together with coarse details like page count or a file-size bucket. Events never include file names, document text or anything you typed.
Third parties
Cloud processing runs on Google Cloud (Cloud Run and Cloud Storage) in our own project. No document is sent to any other third-party service unless a tool explicitly says so.
Contact
Questions? Email support@pdfella.example.