Privacy · 2026-08-24
Your PDF is not analytics.
PDFrig is designed for sensitive documents: process locally when practical, collect little, label cloud processing before upload, and delete temporary objects on a short schedule.
Development draft — this page is local product evidence, not an approved public policy or legal commitment.
Local work stays local.
The browser viewer, organizer, annotations, supported forms, visual signatures, protection, metadata, image, and optimization tools run in the active browser tab. PDFrig does not receive those PDF bytes unless you separately choose an action labelled for cloud processing.
Cloud processing is temporary and explicit.
When an enabled OCR or Office conversion beta needs cloud processing, the action explains why, what is uploaded, the applicable limit, and deletion timing before upload. Input is deleted when no longer needed; output defaults to 1 hour, with a 24-hour lifecycle safety net.
Processing-location disclosure: Local development only; production regions are not approved.
Account, billing, and support data have separate purposes.
- Identity and workspace membership support authentication and authorization.
- Stripe-hosted pages handle payment details; PDFrig stores necessary references only.
- Job history is content-free, opt-in, and defaults to 30 days.
- Support starts with email, category, safe error code, and opaque request ID—never a PDF.
Optional analytics require a separate choice.
If enabled, the local consent control can send only approved event names, product surface, stable feature ID, result class, application version, and time. It does not send filenames, document text, PDF bytes, account identifiers, or a persistent cross-session identifier. Necessary authentication and billing state are separate from this choice.
Your choices and contact.
You can keep optional analytics off, opt out of content-free job history, delete cloud objects immediately, and request account deletion. Contact privacy@example.invalid for access, correction, or privacy questions after the production address is approved.