Your document. Your control.
See exactly where each kind of data goes, what stays on this device, and what you can delete immediately.
Manual editing and batch file output run in your browser. AI is a separate, visible action.
What happens in every workflow.
No vague “secure by design” label. Here is the actual boundary.
Manual editor
PDF bytes, annotations, and up to five recent files live in this browser’s IndexedDB workspace.
No PDF content is sent to UnoPDF cloud services.Uno AI commands
Only extracted text blocks and your instruction pass through Firebase Functions to OpenAI.
The original PDF bytes are not included in command requests.Uno Vision OCR
Prepared page images are sent through Firebase Functions to OpenAI only after you confirm the OCR notice.
OCR never starts silently and detected text is reviewed before it is applied.Batch automation
Original PDF bytes and generated ZIP output remain in your browser. Extracted text is sent for each AI command.
New PDF copies are generated locally only after your approval.Account workspace
Firebase stores identity, profile preferences, plan metadata, usage counters, and saved command workflows.
PDF bytes, PDF text, and local recent-file history are not stored in your account.OpenAI API, with realistic retention language.
UnoPDF sends AI requests with response storage disabled. OpenAI states that API inputs and outputs are not used to train models by default. Standard abuse-monitoring logs may still retain customer content for up to 30 days unless the API organization is approved for stronger data-retention controls.
Delete, export, or reset.
These controls act on the real data locations described above.
Delete local PDF history
Removes PDF bytes, annotations, and recent-file records from UnoPDF’s IndexedDB workspace on this device.
Reset local app data
Clears local preferences, usage counters, and privacy-safe analytics events. Firebase sign-in remains active.
Download privacy snapshot
Exports identity/profile metadata and local usage information. PDF content is deliberately excluded.
Delete my UnoPDF account.
Permanently removes Firebase identity, profile, AI usage records, and saved workflows. It also clears this browser’s local PDF workspace. This cannot be undone.