Do I need a data processing agreement to use these tools?

For the 48 browser-side tools there is no processing to cover: the file never leaves the device, so we never act as a processor. A DPA is only relevant to the few tools that send a file to our server.

Where are my documents stored?

Nowhere. Browser-side tools keep the file on your device. Server-side tools hold it only for the seconds the conversion takes, then delete it. Nothing is written to long-term storage.

Is any data transferred outside the EU?

Not for browser-side tools, because nothing is transferred at all. Grammar Check sends text to LanguageTool, and the AI tools send text to an AI provider — those are the transfers to consider, and both are listed on this page.

GDPR and your documents

Most of what this site does happens inside your browser. There is no upload, so there is nothing to store, transfer, or sign an agreement about.

Last updated 19 September 2026

The short version

48 of the 59 tools here run entirely in your browser. Your file is opened by your own computer, changed by your own computer, and saved by your own computer. It is never sent to us, which means we never hold it, never process it, and never have to tell you what we did with it — there is nothing to tell.

That is unusual. Every large competitor uploads your document to their servers to work on it, which turns an ordinary task into a data transfer with an organisation you have to trust. For a contract, a bank statement or a personnel file, that difference is the whole question.

How to verify it rather than believe it

Open any browser-side tool, press F12 to open developer tools, choose the Network tab, and use the tool. You will see no upload — the file never appears in the request list. This is checkable in thirty seconds, which is the point: you should not have to take a privacy claim on faith.

Which tools never send anything

These 48 work offline once the page has loaded. You can disconnect from the internet and they still work:

Merge PDF · Split PDF · Remove Pages · Extract Pages · Organize PDF · Rotate PDF · Scan to PDF · Compress PDF · OCR PDF · JPG to PDF · Excel to PDF · Text to PDF · Markdown to PDF · PDF to JPG · PDF to Word · PDF to Markdown · PDF to PowerPoint · PDF to Excel · Edit PDF · Sign PDF · Fill PDF Forms · Page Numbers · Header & Footer · Watermark PDF · Crop PDF · Redact PDF · Compare PDF · Image Converter · Compress Image · Background Remover · Upscale Image · Passport Photo · Watermark Image · Meme Generator · Color Picker · Word Counter · Case Converter · Duplicate Remover · Find & Replace · Dummy Text · QR Code Generator · Invoice Generator · Age Calculator · Barcode Generator · Unit Converter · Percentage Calculator · Password Generator · Resume Builder

Which tools do use a server, and what happens

9 tools need software a browser cannot run — writing encrypted PDFs, converting Office documents with their exact layout, PDF/A conversion and repair:

Repair PDF · Word to PDF · PowerPoint to PDF · HTML to PDF · PDF to PDF/A · Protect PDF · Unlock PDF · Grammar Check · URL Shortener

For these the file is sent to our own document service, converted, returned, and deleted as soon as the result is sent back. It is not written to long-term storage, not backed up, and not looked at. The service runs on our own server, not a third party’s.

The tools that involve someone else

Grammar Check sends the text you are checking to LanguageTool, which does the checking. Their terms apply to that text.
AI Summarizer and Translate PDF send the text of your document — not the file — to an AI provider, because that is where the model runs. The provider’s terms apply to that text. We keep no copy.
URL Shortener stores the address you shorten, because storing it is the feature, and checks it against Google’s malware list before creating the link.

Every other tool in the list above sends nothing to anyone. If a document must not leave your organisation at all, those are the ones to use.

Accounts, cookies and payments

No account is needed for any tool. Signing in exists only so someone can hold a balance for AI runs, and uses Google — we receive an email address, a name and a picture, nothing else.
Analytics counts visits and which tools are used. In the EEA, the UK and Switzerland it starts with cookies denied and stays that way until you accept. It never receives a file, a filename, or anything you typed into a tool.
Payments are handled by Lemon Squeezy as merchant of record. We never see a card number.

Do you need a data processing agreement?

For the browser-side tools, no — not because we say so, but because there is no processing to agree about. We cannot be a processor of data we never receive.

For the server-side tools, you are sending us a file, briefly. If your organisation requires an agreement covering that, write to support@opendoctools.com and we will sort it out. If it does not, you can simply avoid those four tools and nothing leaves your building.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. In practice the answer is usually “nothing”: unless you have signed in, contacted support or shortened a link, there is no record of you beyond anonymous analytics. If you have an account, deleting it from your account page removes everything at once.

The full detail of what is stored and for how long is in the privacy policy.