Privacy Policy
We handle your files privately. We do not inspect or share your document contents. All uploaded files are stored temporarily in a private storage to process the conversion, and are automatically deleted exactly 1 hour after uploading. We do not store files permanently.
File handling summary
Browser-based tools
Tools such as Merge PDF, Split PDF, Compress PDF, Image to PDF and Edit PDF process files in browser memory. Files are not uploaded to Wandly servers.
Server-based tools
Some Office/PDF conversions require server processing. Files are transmitted over HTTPS, processed automatically, not used for AI training, and deleted within 1 hour.
1. Data Processing & Document Handling Models
To ensure maximum privacy, Wandly employs two distinct processing models depending on the specific tool you choose:
A. Browser-Based Tools (Client-side Tools)
The majority of our PDF utility tools (including PDF Editor, Sign PDF, Merge PDF, Split PDF, Compress PDF, Rotate PDF, Add Page Numbers, Watermark PDF, Image to PDF, etc.) process data completely offline inside your web browser:
- Local Processing: Your files are read and processed directly using WebAssembly and JavaScript within your browser session.
- Browser-based processing: For supported browser-based tools, documents are processed in your browser on your device.
- Cloud storage scope: Supported browser-based tools do not use Cloudflare R2 or database storage for the processed file.
- Local Output Generation: The final modified file is generated in your browser memory and is ready for instant download.
B. Server-Based Tools (Backend Tools)
Advanced document conversions (such as Word to PDF, Excel to PDF, PowerPoint to PDF) require specialized processing engines hosted on our secure cloud architecture:
- Encrypted Transmission: Your files are uploaded securely over HTTPS connections directly to our secure Cloudflare API Gateway.
- Automated & Private Processing: Conversion is carried out entirely by automated server pipelines without any human intervention. We never read, inspect, or share your document contents.
- No AI Model Training: We do not use your files or document contents to train AI models.
- Automated Permanent Purge: Uploaded files and converted outputs are automatically and permanently deleted from our private storage within 1 hour.
- Zero Content Logging: Our FastAPI converter backend on Hugging Face does not log file contents. Logs only track general status codes (e.g., Job ID X: SUCCESS).
2. Strict 1-Hour Auto-Deletion Policy
Our automated cleanup policy applies strictly to Server-Based Tools (Backend Tools). All inputs, outputs, and job metadata are governed by an automated time-to-live (TTL) expiration mechanism inside Cloudflare KV and R2. For supported browser-based tools, data is processed on your device, so cloud storage is not used for those workflows.
| Data Type | Storage Location | Retention Period | Deletion Mode |
|---|---|---|---|
| Uploaded Files (Backend Tools) | Cloudflare R2 Bucket | Max 1 Hour | Permanent Purge |
| Converted Output (Backend Tools) | Cloudflare R2 Bucket | Max 1 Hour | Permanent Purge |
| Job State Metadata (Backend Tools) | Cloudflare KV Database | 1 Hour | Auto-Expired |
| Locally Processed Data (Client-side Tools) | Your Local Device (RAM) | Instant | Self-cleared upon closing tab |
3. GDPR & CCPA Compliance
Because we do not store personal information, gather cookies, track user identity, or persist document files longer than 1 hour, our system inherently complies with standard global data protection frameworks:
- Right to be Forgotten: Automatically achieved because your files are completely purged from existence after 60 minutes.
- No Sale of Personal Data: We do not sell, rent, or lease any data, nor do we run personalized advertising tracking networks.
4. Updates to This Policy
We may update this policy periodically to reflect changes in our cloud architecture. Any adjustments will be posted directly on this page with an updated timestamp.