01Who we are

Paperwing (paperwingpdf.com) is a free set of PDF tools. In this policy, “we” means the operator of Paperwing. You can reach us at contact@paperwingpdf.com.

02Your files

When you use a tool, your file is read and processed by code running in your browser tab. It is not sent to us or to anyone else.

Files stay in your device’s memory only while the page is open. They are cleared when you close or reload the page, switch tools, or press Start over. We never store, view, copy or sell your documents.

03Translation, OCR and AI summaries

The Translate tab uses the translation engine built into your browser (Chrome or Microsoft Edge on a computer). Your document is read and translated on your own device. Its text is never sent to Paperwing or to any translation server.

The first time you translate between two languages, your browser may download a language pack from its maker (Google or Microsoft). That download contains only the language model, never your document.

OCR PDF recognises text on your device with the open-source Tesseract engine. The language data it needs is downloaded from paperwingpdf.com and contains no information about you.

The AI Summarizer uses the AI model built into your browser, if it has one, and otherwise picks key sentences with code that runs on this page. Your document is never sent to an AI service.

04Information we do not collect

You don’t need an account, and we don’t ask for your name, phone number or payment details to use the tools. The optional Gap Assessment profile never leaves your device. We don’t use advertising or tracking cookies.

05Information stored on your device

Paperwing saves your chosen language and your light or dark theme in your browser’s local storage.

If you use the Gap Assessment, your assessments, notes, audit evidence, supplier records, report details and optional profile are saved there too. This data stays in this browser on this device. It is never sent to us, and it is deleted if you clear this site’s data.

Anyone who uses the same browser profile can see this data, so use a personal device for sensitive assessments. The optional profile is a local convenience, not an online account, and it cannot sync between devices.

06Technical data

Like any website, our hosting provider automatically keeps basic request logs, such as IP address, browser type and time of visit, to deliver the site and protect it from abuse. These logs never contain your files.

Fonts and all code libraries are served from paperwingpdf.com itself. The site does not load fonts, scripts or images from Google or any other third party, except the Cloudflare Web Analytics script described below.

07Visitor statistics

We use Cloudflare Web Analytics to count visits and see which pages and tools are used, so we can improve the site.

It does not use cookies or local storage, does not track you across other websites, and never sees your files or assessments. It records general information such as the page visited, the referring site, your country, and your browser and device type.

08When you contact us

If you email us, we receive your email address and whatever you write. We use it only to reply, and we delete it once it is no longer needed.

09Security

We protect the site and the files you open in it with these measures:

• The site is served only over encrypted HTTPS connections.
• A strict Content Security Policy stops the page from sending data to other servers or running code from unapproved sources.
• All code libraries are hosted on our own domain instead of third-party servers, so they can’t be swapped out by someone else.
• Every file is checked for its real type and size before it is opened. Password-protected PDFs are only opened by Unlock PDF, with the password you type, on your device.
• Gap Assessment local-profile passwords are never stored, only a salted one-way hash (PBKDF2-SHA-256). The local profile is not an account and does not encrypt your data; use an encrypted backup (AES-256-GCM) to protect it.
• Pages run no inline JavaScript, and everything you type is escaped before it is displayed, which blocks script-injection attacks. See the Security page for details.
• The page cannot be embedded inside other websites, which blocks look-alike and click-jacking attacks.

10Children

Paperwing is not directed at children under 13, and we do not knowingly collect their personal data.

11Your rights

Depending on where you live, including under Saudi Arabia’s Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR), you may have the right to access, correct or delete personal data we hold about you.

Because we do not collect files, assessments or online accounts, the only personal data we may hold is email you send us. To make a request, contact us at contact@paperwingpdf.com.

12Changes to this policy

If we add features such as advertising, we will update this policy before they go live and change the date at the top of this page.