HTTPS Transport
The production site and API are served over HTTPS. Secure cookies and strict transport security are enabled for production sessions.
Security
Security and Data Handling
PDF2TEXT uses authenticated workspaces, bounded processing, and HTTPS transport to protect customer document workflows.
Automatic Deletion
Uploaded files and their extracted results are deleted automatically: 7 days after upload if you have not paid, and 30 days after upload if you paid for a document or pages. Subscribers keep them until they delete them, or choose deletion 30 or 90 days after upload. You can delete a workspace's files yourself at any time, and deleted files and results are erased from our servers.
Purpose-Limited Processing
Customer documents are processed to provide extraction, validation, and export features. We configure supported OpenAI API requests with storage disabled and do not sell uploaded documents or extracted financial data.
Bounded Processing
File size, page count, image dimensions, render memory, request rates, and worker time are bounded to protect service availability.
Strict Access Control
Documents and exports are owner-scoped. Browser sessions and API keys cannot read another account's files or runs.
Data Requests
You can contact support to request access to or deletion of account data and stored documents. Business customers can also request subprocessor details or a data processing addendum path from security@pdf2text.ai.
Contact
Questions About Security?
We're happy to answer any questions about our security practices and how we protect your financial data.