Sovereign Privacy & Data Security

Privacy Policy & Zero-Retention Guarantee

At PDFNepal, your privacy and document sovereignty are our highest priorities. We are engineered from the ground up with strict zero-retention guarantees, automated file purges, and enterprise-grade encryption.

Last Updated: September 2026 Nepal Privacy Act 2075 & GDPR Compliant
Zero File Retention

Files are automatically purged within 1-2 hours or instantly upon clicking delete.

No AI Training

Your files, text, and CV data are never used to train or refine machine learning models.

TLS 1.3 Encryption

End-to-end cryptographic encryption in transit prevents eavesdropping and data tampering.

No Data Selling

We never sell, broker, or monetize your personal identity or document contents.

Policy Navigation
100% Free & Open Document Processing
01

Overview & Commitment

PDFNepal (“we”, “our”, or “us”) operates the online PDF utility suite, OCR tools, and CV Maker accessible at pdfnepal.com. We believe that privacy is a fundamental human right. Our tools are engineered to empower individuals, students, legal professionals, developers, and businesses in Nepal and across the globe with sovereign, high-speed document utilities without intrusive data harvesting.

Our Core Privacy Promise: We do not inspect, read, sell, rent, or share the contents of your documents with any third parties or advertising networks.
02

Document & File Processing Lifecycle

When you use our online PDF tools (such as Merge, Split, Compress, Convert, OCR, or Watermark), your files go through a secure, automated lifecycle:

1
Encrypted Ingestion

Uploaded files are transferred over TLS 1.3 encrypted channels directly into isolated temporary processing directories.

2
Automated Execution

Our backend execution engines process your request (e.g., merging pages, OCR text extraction, or compression) entirely programmatically without human inspection.

3
Automated Purge & Deletion

Output files are stored temporarily for download. Our automated background sweepers permanently delete both source and processed files within 1 to 2 hours. You may also click the "Delete Now" button on any tool result screen to trigger immediate zero-trace eradication.

03

Information We Collect

We adhere to the principle of Data Minimization. We collect only what is strictly required to provide our services:

Account Information

If you create an account or sign in with Google OAuth, we store your full name, email address, and encrypted credentials to manage your account and save your CV Maker drafts.

Technical & Diagnostic Logs

Basic anonymized telemetry such as IP address (for rate limiting against DDoS abuse), browser user-agent, operating system, and tool success rates. Logs contain no document contents.

04

How We Use Your Information

  • To execute document conversions and tools: Converting, merging, compressing, or formatting your requested PDF tasks.
  • To maintain account features: Saving your CV Maker drafts, user profile, and authentication sessions.
  • To secure our infrastructure: Enforcing rate limits, preventing automated script spamming, and ensuring high server availability for all users in Nepal and globally.
  • To communicate service updates: Sending transactional verification emails (OTP codes, password reset links) when requested by you.
05

CV Maker & Resume Privacy

Our CV Maker is built with user privacy and local control in mind:

  • Guest Users: Your resume data is cached locally in your browser session (sessionStorage) and session cache. It is private to your device.
  • Registered Users: Your saved CV documents are encrypted in our sovereign database under your unique user ID and accessible only by you.
  • Typst Vector Compilation: High-resolution vector PDF rendering happens in an isolated container and the resulting binary is sent directly to your browser.
  • Full Deletion Control: You can delete any saved CV from your "My Saved CVs" dashboard at any time, instantly wiping it from our database.
06

Security & Encryption Standards

TLS 1.3 Transport

All data in transit is encrypted using modern cryptographic ciphers.

PBKDF2 Password Hashing

Passwords are salted and securely hashed; plain text is never stored.

Isolated Sandboxes

File rendering and OCR tools execute in isolated memory processes.

07

Your Rights & Data Control

Under applicable data protection laws (including Nepal's Individual Privacy Act, 2075 and GDPR), you hold clear rights regarding your data:

Right to Access: View and export any saved resumes or profile details.
Right to Rectification: Update your profile or credentials anytime.
Right to Erasure: Delete any saved document or request full account deletion.
Right to Restrict: Opt out of optional performance telemetry.
08

Cookies & Tracking Policy

We use minimal, strictly necessary cookies to keep you logged in and preserve your session state. We do not use third-party cross-site advertising trackers.

Cookie Name Purpose Duration
.AspNetCore.Identity.Application Authenticates logged-in user sessions securely. Session / 30 Days
PDFNepal_CvSessionId Isolates guest CV Maker drafts so you don't lose progress. 30 Days
__RequestVerificationToken Anti-forgery token protecting against CSRF attacks. Session
09

Frequently Asked Questions

Yes, 100%. All uploads are processed over encrypted channels and stored in temporary, isolated directories. No human ever inspects your files, and they are automatically purged within 1-2 hours or immediately when you click "Delete Now".

No. We strictly never use any customer files, OCR scans, or resume contents to train, fine-tune, or feed machine learning algorithms.

Yes. PDFNepal is engineered specifically to meet the high privacy expectations of Nepali citizens, corporate enterprises, banks, and legal practitioners. Whenever possible, our client-side tools run directly in your browser without sending files to the server.