Privacy Policy
Last updated: October 4, 2026
The short version
- You don't need an account. We don't ask for your name or email.
- We keep an encrypted copy of every PDF you upload for 1 year, then delete it automatically.
- The compressed file you download is deleted right after you download it (or after 30 minutes at most).
How we process your PDF
When you upload a PDF, our server compresses it. This is done by software; no person reads your document as part of this process.
What we keep, and for how long
| File | What happens |
|---|---|
| Your original PDF | Kept, encrypted, for 1 year from upload, then permanently deleted. |
| The compressed PDF you download | Deleted after you download it, or after 30 minutes at most. |
Why we keep uploaded PDFs
Keeping a record of uploads for a limited period lets us:
- Investigate and respond to abuse of the service, such as someone uploading stolen documents.
- Answer security incidents, legal requests and disputes about what was processed.
- Demonstrate, during audits, that files were handled and protected correctly.
We do not use these files for advertising, analytics, or training models, and we do not sell or share them.
How we protect retained files
- Encrypted at rest with AES-256-GCM. The encryption key is stored separately from the files.
- Stored with restricted file permissions and not accessible from the public internet.
- Automatically and permanently deleted when the 1-year period ends.
Your choices
Accepting this policy is required to use tinypdf.app. If you don't want a document kept, don't upload it. You can also contact us to ask for access to, or early deletion of, a retained file; we will help unless we are legally required to keep it.
Contact
[Your company name and privacy contact email]