Security & Data Handling

How your files, payments and account data are protected on PDF Editor HQ.

Tools that run in your browser

Text and developer utilities — the JSON, HTML and Markdown formatters, the hash, Base64, JWT and URL tools, the case and word-count tools, the diff checker, colour picker, password and lorem-ipsum generators, and the QR generator — process your input entirely on your device. For these tools, your input never leaves your browser and is never uploaded to a server.

Tools that run on our servers

Every tool that processes an uploaded PDF, document or image — merge, split, rotate, organize, compress, watermark, password protection, signing, annotation, form filling, PDF editing, OCR, and all conversions to and from Word, Excel, PowerPoint, images, HEIC and camera scans — requires server-side processing. Your file is sent over an encrypted HTTPS connection, processed, and automatically deleted once processing is complete. We do not retain your uploaded files and have no access to them after processing.

What we never do

We never use your files or content to train AI models.
We never share your files with third parties, and we never sell your data to anyone.
We never keep your files after processing is complete.
We never add watermarks to your output.

Payments

Paid subscriptions are processed by our payment provider, Paddle, which acts as the merchant of record. Your full card details go directly to Paddle and are handled under industry payment-card security standards — they are never received or stored on PDF Editor HQ servers. Every paid subscription is covered by a 14-day money-back guarantee.

Your account data

A free account stores only the details you provide — name, email and profile settings — plus your plan and usage counters. You can request complete deletion of your account and all associated data at any time by contacting support; deletion is permanent and cannot be undone.

Reporting a security issue

If you believe you have found a vulnerability in PDF Editor HQ, please report it through our contact form with "Security" in the subject and include steps to reproduce. We review every report and will respond as quickly as we can. Please give us reasonable time to fix an issue before disclosing it publicly.