The model in plain terms
No upload, ever
Files are read with the browser's local File API. They are held in memory and written back to a location you pick on your own device. They are not attached to any outgoing request.
No account, no tracking tied to documents
There's nothing to sign up for, so there's no account record to link to what you processed. Basic, anonymous page-load analytics may apply to the marketing pages only — never to file contents.
Open about what runs
Every processing module is implemented as a plain JavaScript function you can read in the source code. If a tool ever needed a server round trip, it would say so before you used it.
OCR and AI features
OCR runs via Tesseract.js WebAssembly — entirely local. AI features (Summarize, Translate, Chat) extract text locally then send only that text to Claude AI. The raw PDF file never leaves your device.