How we handle your data
This page explains what actually happens to your files and data, in plain language. It's not a substitute for a formal legal privacy policy — if you're deploying this platform for real, have counsel review a proper policy before launch.
Client-side tools (PDF, image, spreadsheet, misc)
Most tools on this site process your file entirely in your browser using JavaScript — merging PDFs, removing image backgrounds, converting spreadsheets, and similar. The file is read from your device into memory, processed, and offered back to you as a download. It is never sent to any server. You can verify this yourself: open your browser's network tab while using any tool tagged client-side and confirm no file upload occurs.
AI-powered tools
Tools that call an AI model (summarizing, transcription, formula generation, and similar) necessarily send some data to our server, which forwards it to OpenAI's API to generate a result. Where possible, we extract only the relevant text in your browser first — e.g. PDF summarization sends the extracted text, not the raw file. Files/text sent for AI processing are used only to generate your result and are not stored after the request completes; we do not use your content to train any model. We do keep a lightweight log of token usage per request, for cost monitoring — not the content itself.
Accounts
AI tools require a free account (email + password). We store your email, a hashed password (never the password itself), and a device fingerprint used only to detect free-tier abuse (see below) — never sold, never shared with advertisers. You can delete your account and every row tied to it, permanently, at any time from your account page.
Abuse prevention
To keep free AI credits usable for real users, we record IP-based signup limits and a device fingerprint at signup. This is used only to flag likely repeat signups (which receive no bonus credits) — it is not used to track you across the web or shared with third parties.
Google Sheets workflows
If you connect a Google account for the scheduled workflow feature, we request only Sheets read/write access (plus your email, to show which account is connected) and use it solely to run the workflows you create. You can disconnect at any time.
What we don't claim
We are not SOC 2, ISO 27001, or HIPAA certified. If a claim like that matters for your use case, don't rely on this platform until it is — we'd rather tell you plainly than make a claim we can't back up.