Trust
Security & data protection
Clear rules for how PDFTrusted handles documents: private browser tools when the job allows it, secure cloud OCR and conversion when the job needs it, HTTPS in transit, clear size and page caps so devices stay smooth, and no permanent PDF archive.
Last updated: September 25, 2026
1. How your files are handled
PDF work is either finished in your browser or sent for a short secure conversion job. We design tools so you can see which path applies before you continue โ not after the fact.
Private browser tools
Everyday PDF edits run in the session on your device. For those tools, the document is not uploaded to PDFTrusted servers as part of the job. On Pro, very large or multi-file jobs can switch to secure cloud processing so they finish faster. Typical examples:
- Merge, split, extract, delete, rotate, rearrange
- Compress on the free plan, image to PDF, PDF to image (where offered locally)
- Watermark, page numbers, protect, unlock, sign
Tool pages show a Secure & private badge when that path applies. Exact coverage can grow as we ship more local tools.
Secure conversion when needed
Some jobs need more processing power than a phone or browser should carry โ especially OCR on scans, Office conversion, and AI helpers. Those jobs transmit the file over HTTPS, process it on our secure cloud, return the result, and clean up temporary artifacts. Examples:
- Pro compress โ every compression level
- OCR PDF โ searchable text layer on scanned and image-based PDFs
- Office and OpenDocument converts (Word, Excel, PowerPoint, ODT, ODS, ODP, and similar)
- PDF to Word / Excel / PowerPoint with OCR mode for scans
- Web captures (HTML, URL, EPUB) and related imports
- AI helpers that summarize, chat, or generate questions
Everyday tools use clear size and page caps so low-end phones stay smooth. Cloud jobs use fair daily limits on Free. We do not turn those jobs into a personal cloud library โ download promptly and keep your own originals. Leftovers are removed within 1 hour.
2. Privacy principles
Short version of how we approach data:
- Collect what we need to run tools, accounts, and billing
- Do not sell your documents or personal data
- Prefer private browser processing when the job allows it
- Use cookies and analytics carefully โ see Cookies
- Respect access and deletion requests where the law gives you those rights
Full detail: Privacy Policy. Cookies: Cookie Policy.
3. Transport & encryption
Pages and API calls use HTTPS so traffic between your browser and our service is encrypted in transit. Secure conversion jobs follow the same transport path for upload and download of results.
Local tools still depend on your device, browser, and network. A compromised device or weird proxy is outside what a website can fully control โ keep software updated and avoid untrusted machines for sensitive files.
4. Retention & cleanup
PDFTrusted is built for finish-and-download, not long-term storage. Temporary processing artifacts from secure jobs are deleted after download when possible, and any leftovers are removed within 1 hour. We do not automatically keep processed PDFs as a lasting archive.
Free daily uses are limited on the server (by signed-in account, or by IP for guests) so paid conversion and AI jobs cannot be bypassed by clearing browser storage. The on-page counter in local storage is only a convenience display โ it is not the security boundary. We do not use invasive fingerprinting for that limit.
If we later offer optional history or cloud save, it will be an explicit choice โ not a silent default.
5. Accounts & payments
Sign-in and account data are handled through our authentication provider. Protect your password. Tell us if you suspect unauthorized access.
Paid plans check out through Lemon Squeezy. Card numbers are processed by the payment provider. PDFTrusted does not store raw card numbers on our servers. Billing rules are in the Terms.
6. How we run the service
Behind the product, we keep access tight and systems current. In practice that means:
- Least privilege for people and services that touch production
- HTTPS everywhere for public product traffic
- Dependency and platform updates on a regular cadence, plus monitoring for failures and abuse
- Separation between document jobs and marketing or analytics where practical
- Incident response: investigate, contain, and notify when we are required to or when users need a clear heads-up
We list only certifications we actually hold. If we complete a formal certification, it will appear here together with the certificate or report.
7. What this page is not
This is a product security overview, not a guarantee that every file is risk-free, not legal advice, and not a substitute for your own policies at school or work. Sign and protect tools help with common PDF needs; they do not replace a notary, qualified trust service, or enterprise DLP suite.
Always keep originals. Verify downloads before you send them to a landlord, HR portal, or court.
8. FAQ
Do you keep my PDFs after I download?+
No permanent document library. Temporary job files from secure conversion and OCR are cleaned up after processing when possible, and leftovers within 1 hour. Keep your own copy of anything important.
When does a file leave my device?+
Browser tools keep the file in the session for that job. On the free plan, compress stays there too. On Pro, every compress uses a short secure cloud step, and a very large or multi-file job can use the same step. OCR, Office conversion, and AI always use that cloud step over HTTPS. Those copies are removed within 1 hour.
Why do you cap file size and pages?+
Caps keep everyday phones and browsers smooth for local tools, and keep free cloud OCR and AI fair for everyone. Higher plans raise ceilings when you need more room.
Do you sell my documents?+
No. We do not sell file contents or turn tool use into a lasting archive for advertising.
Where is payment handled?+
Checkout runs through Lemon Squeezy. Card numbers are handled by the payment provider โ not stored on PDFTrusted as raw card data.
9. Contact
Security or privacy questions: support@pdftrusted.com or Contact. If you believe you found a vulnerability, email us with steps to reproduce โ no public dump of user data, please.