Privacy policy

1. What we collect

We collect the minimum data needed to operate the site. Specifically:

• Server logs with basic request metadata (IP address, request time, URL, user agent). These are kept for up to 7 days for abuse monitoring and debugging, then deleted.
• Anonymous analytics events (tool viewed, upload started, processing completed, download completed). These are aggregate counts — we don't track individuals across sessions.
• Contact form submissions (name, email, message) when you fill out our contact form. These are kept for up to 90 days so we can reply, then deleted.
• Rate-limit buckets: in-memory sliding-window counters per IP. They are not persisted and reset when the server restarts.

2. How files are processed

When you upload a file to a tool, the file is sent to our servers over an encrypted connection (HTTPS). The server processes the file in a temporary directory under the operating system's os.tmpdir() namespace, writes the output, returns it to your browser, and then deletes both the input and the output. The deletion happens in a finally block on every request, so it runs even if the request fails.

In addition, a background sweeper deletes any leftover temporary directories older than 1 hour, in case the request path is interrupted before cleanup runs. We do not copy your files to cloud storage, we do not index them, and we do not use them to train machine-learning models.

The only exception is the AI tools (Summarize PDF, Ask PDF). For those tools, the text content of your PDF is sent to our LLM provider for inference, then discarded. We never persist the text or the AI's response beyond the lifetime of the request that returns it to you.

3. What we don't collect

• We don't log file names or file contents.
• We don't log search queries beyond the first 80 characters and a basic printable-character filter.
• We don't use third-party analytics that track users.
• We don't use cookies to identify you across sessions (the only cookies we use are for theme persistence — see below).

4. Cookies

WOW PDF uses a single first-party cookie to remember your light/dark theme preference. We don't use cookies for advertising, cross-site tracking, or remarketing. See our cookie policy for details.

5. Third parties

We share data with the following third parties:

• Our hosting provider sees the IP addresses of incoming requests, as is necessary for any web host. They do not see file contents.
• Our LLM provider receives the text content of files submitted to AI tools, for the duration of the inference request only. They do not retain it.
• Advertising partners (currently none; if we add AdSense in the future, this section will be updated). Ads are placed in clearly labeled ad slots that are never adjacent to a primary download or upload button.

6. Your rights

If you have submitted personal information through our contact form and would like it deleted, email us at privacy@wowpdf.app and we will remove it within 30 days. For EU/UK users, this is a manifestation of your rights under GDPR; for California users, under CCPA. We do not sell personal information.

7. Children's privacy

WOW PDF is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, please contact us and we will delete it.

8. Changes to this policy

We may update this policy as our practices change. Material changes will be reflected by updating the "last updated" date at the top of this page. We won't materially reduce your protections without notice.

9. Contact

Questions about this policy? Reach us at privacy@wowpdf.app or through our contact page.