Privacy Policy

Last updated: September 20, 2026

The short version: your files never leave your device, and we collect as little data as the web allows.

1. Files you process. Most AmiPDF tools process files entirely in your browser using JavaScript — those files are never uploaded, transmitted, logged, or stored by us. Exception — server-processed tools: document conversion (Word, Excel, PowerPoint to and from PDF) and HTML to PDF / URL to PDF renders on our server with a real browser or office engine. For these, your file is uploaded, converted, and deleted immediately after the result is produced, with a one-hour backup cleanup in any failure case; nothing is retained or used for any other purpose. Closing the tab clears them from memory. One exception: the PDF workspace can keep a local recovery draft (files, page order, undo history) in your browser's own storage on your device — it never leaves your device, and leaving the workspace clears it. eSign documents are different: when you send a PDF for electronic signature, the file is uploaded and stored on our server until you delete it or close your account, because your signers must reach it through a private link. Stored documents are never listed on any public URL and are never used for any other purpose.

2. Information we collect. The PDF tools run without accounts: we serve static pages and ask nothing of you. If you create an eSign account, we store your email address and a hash of your password. When you send a document for signature, we also store the signer names and email addresses you enter, and an audit record for every view and signature (time, IP address, browser) — this record evidences the document’s history and is attached to its completion certificate. For the tools we may use privacy-respecting, aggregate analytics to understand which tools are used; we do not build profiles of individual users. If analytics are enabled, standard technical data (page URL, referrer, browser type, country-level region) may be recorded.

3. Cookies. The Service sets one functional cookie ("amipdf_lang") that remembers your language choice. It contains no identifier beyond the language code and is never shared. If you use eSign, a login cookie ("esign_session") keeps you signed in: it holds a random session token only, expires after 30 days of inactivity, and is never shared.

4. Third parties. Pages load fonts and processing libraries from public CDNs (jsdelivr) when you interact with a tool; those providers may log standard request data under their own policies. No other third-party tracking is used, and we do not run advertising.

5. Legal bases (GDPR). Where the GDPR applies, processing rests on legitimate interest (operating and improving the Service) and consent (analytics, where applicable). You have rights of access, rectification, erasure, and objection; since we hold no account data, the practical exercise for file privacy is simply not uploading any — which our architecture guarantees.

6. Children. The Service is not directed at children under 13 and collects no age-related data.

7. Changes. Material changes to this policy will be reflected on this page with an updated date.

8. Contact. Privacy questions: [email protected].