Privacy
The short version: your document is converted and deleted, no copy is kept, and the service never sends it anywhere else.
Your files
- A file you upload is written to a private per-request temporary directory on the server, converted, and deleted before the response finishes. It is not moved to storage, not backed up, and not included in any log.
- No outbound request is ever made. The server has no browser, no crawler and no third-party conversion service behind it.
- Nothing you send is used to train a model. There is no model: the conversion is Poppler and ImageMagick on the file's own layout data.
What is logged
One line per API request: a random request id, the method and path, the HTTP status, the duration, and which API key was used (stored only as a truncated hash). When a request fails authentication the line also names the request's header names and user agent, never header values, so a broken marketplace integration can be diagnosed. Log lines are kept on the server for 30 days and rotated.
Not logged: file contents, extracted text, filenames from your machine, or the document's metadata. The API's own response carries a request id so a support question can be matched to a line without sending the document again.
The demo page
/try converts one document without a key, so it needs a counter to stop it being used as a free converter: three conversions per address per 24 hours, and 200 for the service as a whole. The counter stores a truncated SHA-256 of the address, a timestamp and a number. The address itself is not written down, and the row is only ever read to answer "is this visitor out of budget".
Who else sees it
If you call the API through a marketplace, that marketplace sees your account and request metadata as part of billing and its own logs, under its privacy policy. The server is hosted by a virtual machine provider, which could in principle observe network traffic as any host can. The operator does not sell or share anything with anyone else.
Your choices
Ask through the contact route on the marketplace listing to have the request lines tied to your key deleted. Cancelling a subscription stops future calls; it does not require anything of the operator, because no document was ever kept.