Privacy & Retention Model
In One Sentence
Section titled “In One Sentence”Local tools never leave your browser; cloud jobs travel over TLS 1.3 into encrypted storage, are deleted automatically at the end of a single plan-independent retention window, and file content is never used for ads or AI model training. The current length of that window — one value for every account — is stated on How Long Are My Files Kept?, and this page does not restate the number anywhere.
How Each Mode Treats Your File
Section titled “How Each Mode Treats Your File”| Local Processing | Cloud Processing | |
|---|---|---|
| Transit | None | TLS 1.3 |
| Processing | In your browser’s private memory sandbox | On encrypted servers |
| At rest | Nothing server-side to protect | AES-256, with lifecycle auto-deletion |
| Deletion | Immediate — closing the tab releases memory | Automatic at the end of the retention window; instant manual deletion from your account |
| Records | None | Task records (metadata only: timestamps, sizes, tool used) kept separately, deletable instantly |
| Training / ads | Never | Never |
Local Tools
Section titled “Local Tools”- Parsing, conversion, and rendering happen in device memory — the file is not uploaded.
- Works offline once the page has loaded. Suitable for confidential everyday documents without a second thought.
- Closing the tab releases everything; the page keeps working whether you are signed in or not.
Cloud Tasks
Section titled “Cloud Tasks”- Transit over TLS 1.3; at rest AES-256 with lifecycle auto-deletion tied to the single retention window.
- “Deletion” means server-side object removal plus expiry cleanup — not merely hiding the download link.
- The remaining window is displayed prominently on the task completion page and in the task records page, and you can delete any cloud file or record instantly from your account instead of waiting.
- File content is never used for ads, model training, or tuning, in any processing mode.
Business & Compliance
Section titled “Business & Compliance”- A standard DPA is available on request (see DPA and Security).
- PDFLean makes no HIPAA / COPPA / FERPA compliance claims and no SOC 2 certification claims. Subprocessor certifications are those each provider publicly discloses.
- Closing your account clears your cloud objects and records; files you already exported remain yours.
- For legal conclusions on retention, processing terms, and the refund terms, see Terms, the refund policy, and the cancellation policy — this page describes behavior, not contract terms.
Related reading
Section titled “Related reading”- How Long Are My Files Kept? — the one place the retention number lives, with the full deletion mechanics
- Free vs Paid on PDFLean — which tools run in each mode
- Frequently Asked Questions — short-form answers including “is PDFLean safe to use with confidential documents?”