Do you keep my original file?
We process uploads temporarily on our server and don’t keep a permanent library of original files. Files travel over HTTPS. Depending on the tool, a result, an attachment preview or a saved report can still contain information from the original.
When files are uploaded and what remains
- File tools: Selecting or dropping a file uploads it for preview. Running the tool uploads it again and creates an export that can include source rows. The download is available for up to 30 minutes and can expire sooner, including when your session ends.
- PDF Studio: Previewing a page uploads that document. Running a tool uploads its inputs. The PDF worker uses temporary files and returns the result to your browser. Compress PDF can return an unchanged copy if the original is already smaller. Download the result before leaving the tool.
- Email attachments: Choosing “Preview my email” uploads the .eml, including its attachments. The server keeps the latest preview’s attachment names and parsed rows, plus any activity you log. Choose “Clear email session data” to clear these. They expire after one hour of Inbox inactivity or when your session ends, whichever comes first.
- Control Room: Selecting a file uploads it for preview. “Run control” saves a report in your server casebook, including findings, cited source values and any review notes you add. Delete a run in Run history to remove its evidence sooner, or export it before the session expires.
How long does my session last?
A signed cookie identifies your workspace. Access to its saved casebook ends 24 hours after the session starts. The server cleans up expired casebooks. To limit how many workspaces one network can create, it derives a quota identifier from your IPv4 address or IPv6 network using a secret key. The casebook’s quota identifier is removed when the server cleans up that workspace.
What stays on my device?
File-tool history, presets and saved Control Room working profiles can remain in your browser after the session expires. Profiles can include names, column headers and rule values. Remove entries in History or My presets; for a working profile, select it and choose Delete profile. You can also clear this site’s browser data. Downloaded files are separate: delete those on your device if you no longer need them.
How are campaign visits measured?
Selected campaign links increment daily totals for tool-page arrivals, successful PDF operations and download clicks. These totals use fixed campaign and tool labels. They contain no document contents, filenames, IP addresses, advertising identifiers or individual browsing histories. This measurement adds no cookies or browser storage; requests use the existing essential workspace session. Counts cover a rolling 90-day period, with older counts removed when the next campaign event is processed. They are event counts, not unique visitors, and can include sample operations. No Google advertising tag is active.
Choose only what an operation needs
For payroll comparisons use pseudonymous IDs. For webhook reviews use endpoint aliases and HTTP status instead of tokens or payloads. Check a redacted document visually before sharing it. Our redaction verification guide explains what to look for.