PrivatePDF Privacy Policy

Last updated: August 27, 2026

Your documents stay on your PC. PrivatePDF is designed for fully offline document processing.

PrivatePDF does not upload documents, page images, OCR text, redaction selections, passwords, file paths, or usage data to PrivatePDF or any third party.

PrivatePDF requires no account and contains no advertising, analytics, telemetry, or remote model downloads. Microsoft Store may process purchases and licensing under Microsoft's privacy terms. PrivatePDF receives only the entitlement status required to unlock purchased features.

Document processing, OCR, detection, conversion, redaction, cleaning and ordinary signing run entirely on the device. If you explicitly enable an RFC 3161 document timestamp while signing, PrivatePDF sends only a cryptographic document hash, algorithm identifier and request nonce to the timestamp authority URL you selected, and receives a signed timestamp token in return. The PDF, extracted text, certificate password and signature drawing are not transmitted. This optional request is disabled by default, and PrivatePDF does not retain the timestamp URL after the signing session.

Settings and an encrypted Microsoft Store entitlement cache may be stored locally. Recent-document lists, document contents, OCR results, and sensitive paths are not retained by default. If you explicitly enable optional reading-progress, recent-file, tab-restoration, or privacy-work recovery features, the selected local state is protected for the current Windows user and can be disabled again in Settings. Temporary processing data is deleted after each job, and stale session data is cleaned after an interrupted run.

For privacy questions or support, email [email protected].