Isolated processing
The PDF engine receives only a random job identifier and can access only that job's private directory.
Short retention
Anonymous files expire after two hours. Account history files remain for 30 days and can be deleted sooner by their owner.
No document analytics
Telemetry never reads document contents, prompts or form values. UseEdith has a separate analytics tenant and origin allowlist.
Local PDF work and optional AI
The complete PDF remains in UseEdith's controlled document-processing infrastructure for editing, OCR, conversion and export. If you choose an AI action, only the selected text or document brief and minimum instructions are sent to OpenAI. The full PDF is not part of that request.
API response storage is disabled and API data is not used to train models. Standard provider security logs may retain input and output for up to 30 days. UseEdith does not place prompts or responses in its own application logs.
Transport and browser controls
HTTPS, restrictive content security policy, private cache headers, upload validation, request throttling and non-public processing services reduce exposure throughout the workflow.
Private account history
The full editor asks for an account only at the moment of export. A signed-in quick-tool result is saved automatically; a guest decides after the operation whether to save it. Every history download, reopen and delete action checks the authenticated owner. Quick-tool history keeps the completed result rather than the uploaded source, while full-editor documents keep the material needed to reopen the edit.
PDF passwords are not retained
Passwords used to protect or unlock a PDF exist only for the processing request. They are not written to the account, history, metadata or application logs.
Report a concern
Send responsible security reports to hello@useedith.com.