Privacy Policy & Guarantees
DocEasy is built around data minimization. Core utilities run directly in your browser without transmitting your files. When heavy server-side processing is requested (such as Ghostscript/qpdf compression), files are processed in ephemeral containers and wiped immediately upon completion. If you choose to create an account, your cloud vault files are encrypted and protected by Supabase Postgres Row Level Security.
Last updated: 2026
1. Client-Side Execution for Core Tools
Standard document conversions, PDF merging, text extraction, sentence summarization, image compression, cropping, and passport photo generation execute locally within your browser context via sandboxed WebAssembly and HTML5 Canvas. Byte buffers never leave your machine for these operations.
2. Ephemeral Server-Side Processing
For intensive PDF tasks requiring deep compression (e.g. Ghostscript and qpdf linearization up to 250MB), files are routed through isolated server API endpoints. These temporary files exist only for the duration of execution and are purged from disk and memory immediately once the compressed file is streamed back to you. We never train AI models or profile documents.
3. Storage Options: Local Session Vault vs. Cloud Vault
Unauthenticated users can use the client-side Encrypted Vault, which stores files strictly in browser session memory with Web Crypto AES-GCM (256-bit) and auto-purges after 2 hours. Users who desire multi-device access can optionally sign up with an email and password to use our Cloud Vault, where files are stored in Supabase with strict Postgres Row Level Security (RLS) and retained until the user deletes them.
4. No Telemetry Harvesting
We do not inject third-party ad pixels, session replay recording scripts, or behavioral trackers. Anonymized performance signals are restricted to essential operational diagnostics.