Privacy

How we handle your PDFs

We’re built for one-off anonymisation with temporary storage and HMAC-authenticated workers. Review detections before applying changes.

Upload & processing

  • • Uploads go direct to object storage via presigned URLs.
  • • Workers download from storage, process, and upload the output.
  • • Worker calls require HMAC signatures with a shared secret.
  • • We don’t require accounts for one-off anonymisation.

Retention & deletion

  • • Files live in temporary storage with lifecycle rules for expiry.
  • • You can delete a job after download; lifecycle cleanup also applies.
  • • Metadata about jobs stays minimal (state, keys, timestamps).

Local-only apps

Our macOS and iOS apps run entirely on-device for teams that cannot upload documents. No cloud processing, no subscriptions.

Best-effort anonymisation: always verify the output before distribution.