Privacy notice

Effective 18 October 2026. Operator and privacy contact: Amir Gomaa, Egypt, mo.gomaa.formal@gmail.com.

Data used to provide the service

We process uploaded PDFs, filenames, selected pages, extracted Markdown/images, corrections and job settings to perform the conversion you request. An encrypted, secure, HttpOnly session cookie identifies your workspace. A recovery key is stored only as a keyed hash; anyone holding the key can access your workspace. Keep it private. These are essential access mechanisms; no advertising trackers or optional analytics cookies are installed.

We keep aggregate visit, inspection, export and error counters, and keyed hashes of network addresses for abuse throttling. Counts are not unique-person measurements. Pageweft's payment ledger stores transaction/event identifiers, a workspace identifier, amounts, credit use, refund status and checkout acceptance time/version. We do not store payment card details in the application.

Providers and international processing

Cloudflare routes HTTPS requests between your browser and our hosting provider. Requests, network metadata and uploaded content pass through its infrastructure and may be processed outside your country. The gateway streams private responses with caching disabled; Cloudflare may retain network and security data under its own policies.

Modal hosts the application, storage and extraction compute, which can process your documents outside your country. MinerU runs as extraction software in that environment; Pageweft does not use your files for model training. Paddle processes checkout information, including payment, billing and fraud-prevention details, under its own notice as merchant of record. Paddle's checkout script loads on the dedicated checkout page; it does not run in the document workspace. Payment receipts and records remain subject to Paddle's separate retention requirements.

Retention and control

Uploaded files, results and corrections expire after 48 hours and are deleted by scheduled cleanup. You can discard an inspected document or delete a conversion earlier through the workspace; deletion is not instantaneous in an in-flight extraction. Financial and recovery records persist to honor remaining credits, resolve disputes, prevent fraud and meet applicable accounting requirements. Encrypted daily financial backups retain seven snapshots and exclude document text and filenames.

Contact us to request access, correction or deletion and to ask about processing. We verify workspace/purchase ownership before disclosing data. Necessary financial records may have to be retained despite a deletion request. Explain the request without attaching confidential documents or sending a recovery key. You may also contact the relevant privacy authority where applicable. Do not use the service for sensitive/regulated data requiring safeguards or a data-processing agreement we have not established.