Privacy and data processing

Uploaded files are stored in your account on object storage (filesystem locally, S3-compatible in production). They expire automatically.

Core PDF tools run on the DocuFlow servers. Document bytes are not sent to an external AI provider unless a live provider is configured and you run an AI tool.

AI features extract text first. The current default provider is a deterministic mock. Enabling `openai_compatible` sends extracted excerpts, not necessarily the original PDF bytes, to that provider.

Passwords used to protect or unlock PDFs are used for that job and are not returned in job listings.

Account deletion removes stored files and revokes sessions.