Security and data handling
Most PDF tools upload your document to a server and process it there. Ours mostly do not. This page tells you exactly which is which, so you can decide what is safe to put in — and it tells you how to check the claim rather than taking our word for it.
The short version: fifteen of our sixteen tools run entirely inside your browser. Your file is never uploaded, and closing the tab leaves nothing behind. Only the AI document-to-Excel converter sends anything to a server, because extracting data from a scan requires a model that cannot run in a browser tab.
Tools that never upload your files
These run on your own device using JavaScript running in the page. There is no upload step and no server-side copy of your document at any point:
- Merge PDF
- Split PDF
- Compress PDF
- PDF to JPG
- JPG to PDF
- Rotate PDF
- Crop PDF
- Organize PDF
- Remove Pages
- Extract Pages
- Add Page Numbers
- Add Watermark
- Scan to PDF
- Repair PDF
- Extract Excel Images
Because the work happens locally, these tools also have no page limits, no account requirement and no queue — the only limit is your own device’s memory.
The one tool that does use a server — and what happens to your file
AI document extraction (PDF to Excel, and the Google Sheets add-on) cannot run offline: understanding the layout of an invoice or a bank statement needs a large model. Here is the complete path your document takes.
- 1
Upload over HTTPS
Your file is sent encrypted to our API at
api.transez.ai, which runs on Cloudflare Workers. - 2
Extraction by Google Gemini
The document and your column instructions are passed to Google Gemini to produce the table you asked for. Provider processing and retention are governed by that provider’s terms — we chose a major provider with enterprise data handling rather than a small proxy service.
- 3
Results are returned, not archived
Our conversion API does not save your document or the extracted table to a document archive. What persists is your account record: email address, page balance, purchase and usage records, and any templates you deliberately saved.
- 4
Sheets data stays in your spreadsheet
When you use the Google Sheets add-on, the rows you insert live in your spreadsheet until you delete them. The add-on only reads the current sheet and only writes back to it.
Practical advice: if a document must not leave your device at all — medical records, identity documents, an NDA — use the browser tools, which are exactly the ones that never upload. For invoices, statements and receipts, the AI converter is the trade-off that makes the extraction reliable.
How to verify this yourself
You do not have to trust a claim on a page. Open any of the browser tools, then:
- Open your browser’s developer tools and switch to the Network tab.
- Pick a file and run the tool — merge two PDFs, compress one, extract images from a workbook.
- Watch the request list. The document itself never appears. You will see page resources, your PDF library loading and (if analytics is on) anonymous page-view pings — nothing carrying your file.
- Run the same test on the AI converter and you will see the upload request to
api.transez.ai. That contrast is the point: we are not claiming that everything is local, we are telling you which part is not.
Infrastructure and accounts
| Transport | HTTPS everywhere, with HTTP Strict Transport Security enabled, so browsers refuse to fall back to an unencrypted connection. |
| Application | Cloudflare Workers serves the site and processes conversion requests. |
| Account data | Cloudflare D1 stores your email address, credit balance, purchase records, usage counts and saved templates. |
| Sign-in | Google sign-in verifies your email address. We never receive your Google password. |
| Payments | Handled by Stripe. Card details go to Stripe directly and never reach our servers, and we do not store them. |
The full breakdown of what we collect and why is in the privacy policy.
What we do not do
- ×We do not sell your documents, extraction results or contact details.
- ×We do not use your uploaded documents to train models.
- ×We do not read your documents for any purpose other than producing the result you asked for.
- ×We do not run the browser tools through a server “just in case” — there is no hidden upload path.
Reporting a security issue
If you believe you have found a vulnerability, please email support@transez.ai with enough detail to reproduce it — the affected URL, the steps, and what you observed. We will confirm receipt, keep you updated while we investigate, and we will not pursue anyone who reports an issue in good faith and gives us a reasonable chance to fix it before disclosure.
For account deletion, data access requests or anything else covered by the privacy policy, the contact page explains what to include.