Short version: your files never leave your browser. We can't see them even if we wanted to.
1. What stays on your device
All PDF manipulation, image rendering, signatures, and tool output happens locally in your browser. The files you drop into Uvelia are never uploaded to our servers. We literally cannot access them.
Tool state (e.g., counter values, notes drafts, recently-used tools) is stored in your browser's localStorage. Clear your browser data and it's gone.
2. What we collect (only if you create an account)
- Email address
- Username
- Password (hashed with bcrypt — never stored in plain text)
- Account creation date
- Newsletter subscription status
- Stripe customer ID (if you subscribe to Pro)
- Subscription status and renewal date (Pro only)
We do not track which tools you use, what files you process, or your browsing behavior on the site.
3. What we share with third parties
- Stripe — payment processing if you subscribe to Pro. Stripe receives your email and payment details directly; we never see your card number.
- Google AdSense — displays ads on free pages. Google may set cookies and use your IP for ad targeting per their own privacy policy.
- Resend — used to send verification, password reset, and newsletter emails to your address.
We do not sell your data. We do not share it with marketers.
4. Cookies
- Required cookies — JWT token for keeping you logged in. Stored in localStorage rather than a cookie, so technically not a cookie at all.
- Advertising cookies — set by Google AdSense if you see ads. You can opt out via Google Ad Settings.
5. Email
We send you:
- Account verification codes (one-time)
- Password reset codes (when requested)
- Email change confirmation codes (when requested)
- Newsletter — only if you subscribed. One-click unsubscribe on the Account page.
6. Your rights
- You can delete your account from the Account page. Deletion is immediate and permanent.
- You can change your email or username at any time.
- You can unsubscribe from the newsletter at any time.
- You can clear all locally-stored data by clearing your browser's site data for uvelia.
7. Data retention
Account data is kept until you delete your account, at which point we remove it from our database. Stripe retains billing records for tax purposes per their policy.
8. Children
Uvelia is not directed at children under 13. If you believe a child has created an account, contact us and we'll remove it.
9. Changes to this policy
If we change anything material here, we'll update the date and (for anything user-impacting) email subscribed users.
10. Contact
Email privacy@uvelia.app.