UnoPDF Trust Center
Your document. Your control.
See exactly where each kind of data goes, what stays on this device, and what you can delete immediately.
No cloud PDF library Review before AI edits One-click local deletion
Current architectureLocal-first by design
Manual editing and batch file output run in your browser. AI is a separate, visible action.
Transparent data map
What happens in every workflow.
No vague “secure by design” label. Here is the actual boundary.
Manual editor
PDF bytes, annotations, and up to five recent files live in this browser’s IndexedDB workspace. Text edits, drawing and page rendering all happen here.
Nothing is sent while you annotate, draw or edit text.Structural edits
Moving an image, removing vectors or rewriting text at object level cannot be done in the browser. For those, the document is sent to UnoPDF’s own worker, processed, and returned — after you confirm the notice, once per document.
Declining keeps the document local; the editor continues with everything it can do on this device.Uno AI commands
Only extracted text blocks and your instruction pass through Firebase Functions to OpenAI.
The original PDF bytes are not included in command requests.Uno Vision OCR
Prepared page images are sent through Firebase Functions to OpenAI only after you confirm the OCR notice.
OCR never starts silently and detected text is reviewed before it is applied.Batch automation
Original PDF bytes and generated ZIP output remain in your browser. Extracted text is sent for each AI command.
New PDF copies are generated locally only after your approval.Account workspace
Firebase stores identity, profile preferences, plan metadata, usage counters, saved command workflows, and last authenticated activity. The referring hostname and campaign parameters from your first visit may be recorded once, for owner-only attribution reporting.
PDF bytes, PDF text, full referrer URLs, raw IP addresses, and precise location are not stored in your account.Visitor statistics
Page views are counted by a Plausible instance we run on our own server. It sets no cookies, stores no IP address, and builds no cross-site profile, so there is nothing to consent to and nothing to opt out of.
No cookies, no device fingerprint, no raw IP address, and no data shared with an advertising network.AI provider transparency
Provider policy OpenAI API, with realistic retention language.
UnoPDF sends AI requests with response storage disabled. OpenAI states that API inputs and outputs are not used to train models by default. Standard abuse-monitoring logs may still retain customer content for up to 30 days unless the API organization is approved for stronger data-retention controls.
Your controls
Delete, export, or reset.
These controls act on the real data locations described above.
Delete local PDF history
Removes PDF bytes, annotations, and recent-file records from UnoPDF’s IndexedDB workspace on this device.
Reset local app data
Clears local preferences, usage counters, and privacy-safe analytics events. Firebase sign-in remains active.
Download privacy snapshot
Exports identity/profile metadata and local usage information. PDF content is deliberately excluded.
Account-level control
Checking account…Delete my UnoPDF account.
Permanently removes Firebase identity, profile, AI usage records, and saved workflows. It also clears this browser’s local PDF workspace. This cannot be undone.
Legal notice
The formal part, in plain words.
Everything above describes how UnoPDF behaves. This section is the information the GDPR requires us to give you. Last updated 14 August 2026.
Who is responsible
UnoPDF is operated by NORD INVEST PA&CO S.R.L., registered in Romania under trade register number J2025055671007, tax identification code (CUI) 52221012, with its registered office at Str. Principală nr. 61, Cornești, comuna Călinești, 437076, jud. Maramureș, Romania. We are the data controller for the processing described here. We have not appointed a data protection officer, as we are not required to. Write to legal@unopdf.ai for anything on this page.
What we process, and why
Account identity — email address, account ID, display name and the sign-in provider you used.
To create your workspace, keep you signed in, and tie your plan to you.
Performance of our contract with you (GDPR Art. 6(1)(b)).Workspace metadata — plan, Uno AI credit counters, usage counts, saved command workflows and last authenticated activity.
To apply your plan limits, show accurate credit balances and restore your saved workflows.
Performance of our contract with you (Art. 6(1)(b)).Document content you explicitly send for processing — the PDF or Word file for structural edits, conversion, layout recovery or OCR.
To carry out the specific operation you asked for. Each of these transfers is confirmed by you before it happens.
Performance of our contract with you (Art. 6(1)(b)), on your instruction.Text blocks and prepared page images sent to the AI provider when you use Uno AI or OCR.
To produce the edit or the recognised text you requested. The original file bytes are not included in AI command requests.
Performance of our contract with you (Art. 6(1)(b)), on your instruction.Payment data — handled directly by Stripe. We receive the subscription status and the invoice record, never your full card number.
To take payment, manage your subscription and meet accounting obligations.
Contract (Art. 6(1)(b)) and legal obligation for accounting records (Art. 6(1)(c)).Referrer hostname — the site that sent you, without the full URL.
To understand which channels bring people to UnoPDF.
Our legitimate interest in understanding how the service is found (Art. 6(1)(f)). You may object at any time.Visitor statistics — page views and the country they came from, counted without cookies, without storing your IP address and without any identifier that would follow you to another site.
To know how many people reach each page. Nothing here can be traced back to a person, so it is not linked to your account.
Our legitimate interest in measuring the site (Art. 6(1)(f)). Because no cookie is set and no identifier is stored, there is nothing to consent to and nothing to opt out of.Server processing requires a signed-in account. Without one, the editor runs entirely in your browser.
Who else sees it
Google (Firebase)
Authentication, database, serverless functions and site hosting.
Processing configured in the EU (europe-west1).UnoPDF document worker
Our own server that performs structural edits, conversions and OCR. Files are processed in a temporary directory and deleted when the response is returned; no copy is kept.
A dedicated machine in Nuremberg, Germany, reachable only over mutual TLS.OpenAI
Uno AI commands and OCR. Requests are sent with response storage disabled.
United States.Stripe
Payment processing and invoicing.
United States and the EU.Our own analytics
A Plausible instance we run ourselves counts page views. It is not a third party: the data never leaves our infrastructure, and it is not sold, shared or joined with anything else.
The same dedicated machine in Germany.We do not sell your data, and we do not share it for advertising.
Transfers outside the EEA
Your documents are processed inside the European Union, on our own machine in Germany. Two services reach the United States: OpenAI, for Uno AI and OCR, and Stripe, for payments. Both rely on the European Commission’s standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards in place. Nothing else leaves the EU as you browse — the typefaces are served from this site rather than from Google, so simply opening a page discloses your address to no one but us.
How long we keep things
Account and workspace dataUntil you delete your account. Deletion is immediate and self-service, on this page.
Documents sent for processingOnly for the length of the operation. The worker removes them when it returns the result.
AI provider abuse-monitoring logsUp to 30 days at OpenAI, under their standard API terms.
Invoices and accounting records10 years, as Romanian accounting law requires. This period survives account deletion.
Data stored on your own deviceUntil you clear it, using the controls above or your browser settings.
Visitor statisticsKept as counts only. Nothing identifies a person, so there is nothing to delete on request.
Your rights
- Access — ask what we hold about you, or download it yourself with the snapshot button above.
- Rectification — have inaccurate details corrected.
- Erasure — delete your account and its data, immediately, from this page.
- Restriction — ask us to pause processing while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format. The snapshot above is JSON.
- Objection — object to processing based on our legitimate interest.
- Withdraw consent — where you agreed to a server operation, simply decline it next time; past operations remain lawful.
The controls higher up this page action most of these immediately. For anything else, write to legal@unopdf.ai and we will reply within one month.
Complaints
If you believe we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, Bucharest, dataprotection.ro, or to the authority where you live.
Automated decisions and children
Uno AI proposes edits, but nothing it produces is applied without your review, and we make no automated decisions that produce legal effects for you. UnoPDF is not directed at children under 16, and we do not knowingly create accounts for them.
Changes
When this notice changes materially, we update the date above and, if the change affects how your data is handled, tell account holders by email before it takes effect.
Privacy is a product surface, not a footer promise.Return here whenever you want to inspect or remove your UnoPDF data.
Open the private editor