VersaPDF Privacy Policy
Effective Date: October 2, 2026
At VersaPDF (versapdf.com), protecting user document privacy is not merely a legal disclaimer—it is an ironclad architectural commitment. This Privacy Policy details our operational practices, our zero-upload client compute model, edge access logs, cookie usage, third-party advertising compliance (Google AdSense), and your statutory data protection rights under GDPR, UK GDPR, and CCPA/CPRA.
Key Privacy Takeaways at a Glance
01 Architectural Principles: Privacy by Design
Unlike legacy online converters that transmit files over HTTP endpoints to remote processing clusters for transformation, VersaPDF implements an air-gapped, zero-knowledge client-side architecture:
“The strongest privacy protection is not a contractual promise not to inspect your files, but an architectural guarantee that remote servers physically cannot receive your files in the first place.”
- Client-Side Sandbox Execution: All document manipulation engines (pdf-lib, WebAssembly bytecode, Canvas renderers) are loaded into your web browser. File processing runs entirely inside local device RAM.
- Zero Document Network Payloads: No network packets containing your document streams are ever transmitted to our servers or any third-party infrastructure. This behavior can be verified at any time in browser Network DevTools.
- Instant In-Memory Disposal: Documents exist only as in-memory ArrayBuffers. Closing or refreshing your browser tab immediately frees the allocated memory via browser garbage collection.
02 Zero Server Retention Policy: Absolute 0-Second Window
Many cloud tool services claim in their policies that "files are purged after 1 or 2 hours from our servers." During that retention window, files remain vulnerable to multi-tenant cache leaks, internal operational access, and cloud storage compromise.
VersaPDF provides an infinitely stronger guarantee: our servers never receive your files in the first place, resulting in an absolute 0-second retention window. Server-side data leaks are architecturally impossible.
03 Technical Logs Collected by Edge Infrastructure
To ensure high availability, fast global caching, and defense against distributed denial-of-service (DDoS) attacks, our edge hosting infrastructure (Cloudflare CDN) records standard HTTP access logs. These logs never contain document data and include only:
- Server Access Logs: Internet Protocol (IP) address and coarse geographical location (country/city level), browser User-Agent, device type, operating system, access timestamps, referring URL, requested static asset paths, and HTTP status codes.
- Local Storage: We utilize browser LocalStorage strictly for functional UI preferences (such as language selection). This data never contains personally identifiable information and is never transmitted.
05 Global Data Protection Rights (GDPR & UK GDPR)
If you reside in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including:
- Right of Access: The right to request copies of any personal data held about you.
- Right to Rectification: The right to request correction of inaccurate data or deletion of personal data.
- Right to Erasure: The right to request deletion of personal data under certain conditions.
- Right to Restrict or Object: The right to restrict or object to our processing of your personal data.
- Right to Data Portability: The right to request transfer of your data to another organization.
Because we require zero user accounts and store zero document interaction data on our servers, we hold virtually no personal data linked to specific named individuals.
06 California Consumer Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures:
- No Sale of Personal Information: VersaPDF does not sell, rent, or trade your personal information for monetary or other commercial consideration.
- Right to Know & Delete: You have the right to request disclosure of personal information collected and request its deletion.
- Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
07 Children's Online Privacy Protection (COPPA)
VersaPDF is designed as a productivity tool for general audiences and does not target or knowingly collect information from children under the age of 13. If you believe such data has been transmitted, please notify us immediately for prompt removal.
08 Policy Updates & Contact Inquiries
We may revise this Privacy Policy periodically to reflect architectural enhancements or legal requirements. When modifications occur, the updated date at the top of this document will be revised. We encourage visitors to review this policy periodically.
Privacy Inquiries & Data Governance
If you have questions or inquiries regarding this Privacy Policy or data governance, please reach out via our Contact & Support page , or email our privacy team directly: