Privacy Policy

Scope and contact

This policy describes how RedactPDFKit handles information when you use redactpdfkit.com. For privacy, access, correction or deletion requests, contact [email protected]. Last updated: November 3, 2026.

Information processed

We process uploaded files, rendered page images, filenames, recognized text and coordinates, selected keywords, saved rule templates, redaction decisions, generated outputs and processing status. If you email support, we receive your email address and the information you choose to send. Hosting and network services also process connection information such as IP addresses and request metadata.

Why we process it

We use this information to process your documents, save progress, produce downloads, diagnose errors, protect the service and answer support requests. Where data-protection law requires a legal basis, processing necessary to deliver a requested service is based on that request or contract; proportionate security and troubleshooting are based on legitimate interests. Optional features are activated by your selections.

OCR and AI providers

Pages are processed by the configured OCR service on our hosting infrastructure. When identity detection is enabled, recognized text and the analysis instructions are sent to a third-party text analysis provider. When optional logo detection is enabled, page images are sent to a third-party image analysis provider. These providers process data under their own applicable service terms and privacy policies. Do not upload documents whose restrictions prohibit this processing.

Hosting and international processing

Cloudflare provides website network services and routes messages sent to our support address to our support mailbox on Gmail. Our hosting and AI services may process data outside your country, including in the United States and China. This deployment does not promise EU-only storage or processing. We do not sell uploaded documents or use them to train our own models; provider retention and model-use practices are governed separately by their terms.

Storage and retention

Original PDF uploads are rendered for processing; persistent job storage contains page images and task information rather than the original PDF file. Page images, recognized information, review progress and generated results remain in active task storage until you delete the task. There is currently no automatic 24-hour or 30-day deletion schedule. Deleting browser cookies does not delete stored tasks. Saved rule templates are managed separately. Service-provider logs and backups, where applicable, may follow separate retention schedules; task deletion does not promise immediate removal from those systems.

Cookies and browser access

An essential session cookie associates tasks with your browser. It is used for task isolation, not advertising. Clearing it may remove your ability to retrieve your tasks from that browser. An optional account uses a username, password hash and hashed recovery code. Passwords and recovery codes are not stored in readable form. Signed-in sessions expire and can be revoked on recovery or logout. We use HTTPS and restrict task access by session or account, but no system can guarantee absolute security.

Website analytics

We use self-hosted Umami at stats.hskbase.com to measure page visits, referral sources, device/browser information and page performance. Analytics does not use advertising cookies or receive uploaded documents, file names, redaction keywords or account identifiers. URL query strings and fragments are excluded, and browser Do Not Track is respected. Session recording is disabled.

Your choices and requests

You can choose detection options, review results, download outputs and delete tasks in the workspace. You can contact us to request access, correction or deletion of personal information, or raise a privacy concern. Where applicable, you may also object to processing, request restriction or portability, or complain to your local supervisory authority. We may need information sufficient to verify that the request relates to your data; do not email complete confidential drawings unless needed.

Payments and policy changes

Our payment integration uses Waffo Pancake for paid subscriptions. Test transactions do not create a live subscription. When used, Waffo receives an opaque account/order reference and purchase details, not uploaded drawings. We store subscription status, billing events and page usage to allocate and reconcile allowances. Payment details entered in the hosted checkout are handled by Waffo. Account and billing records remain until deletion is requested, subject to applicable record-keeping requirements. We will update this policy when data practices change. Check the update date above before uploading new documents.